General
-
Target
66cbcaeaac5ccaf8633ff3f4a53362b1279a58bee0c31274afdd982328ad8b3d
-
Size
285KB
-
Sample
211126-qel3mscdgn
-
MD5
d133e38799681cdb71bb8a08abf73eb5
-
SHA1
47fd5e03e8b6b8617f3f7e51d0ed20fdee168186
-
SHA256
66cbcaeaac5ccaf8633ff3f4a53362b1279a58bee0c31274afdd982328ad8b3d
-
SHA512
467654e78a02fd60dd28b9a2fce9f969ae065b337387663488e3c9ce3ddc67372b949482983ccc816750e28d13ecb82edade22e7b3c918ca96052b8e58bc28d8
Static task
static1
Malware Config
Extracted
redline
Pubdate
193.56.146.64:65441
Targets
-
-
Target
66cbcaeaac5ccaf8633ff3f4a53362b1279a58bee0c31274afdd982328ad8b3d
-
Size
285KB
-
MD5
d133e38799681cdb71bb8a08abf73eb5
-
SHA1
47fd5e03e8b6b8617f3f7e51d0ed20fdee168186
-
SHA256
66cbcaeaac5ccaf8633ff3f4a53362b1279a58bee0c31274afdd982328ad8b3d
-
SHA512
467654e78a02fd60dd28b9a2fce9f969ae065b337387663488e3c9ce3ddc67372b949482983ccc816750e28d13ecb82edade22e7b3c918ca96052b8e58bc28d8
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-