General
-
Target
8ad2c16853ef58cee198a1d00ef05d8b4ecdfa20feb1adf9d244543460e130a6
-
Size
294KB
-
Sample
211126-tddawsgeh7
-
MD5
16f82a8d9fcb5c050278489c02417038
-
SHA1
bc8e4447c9f9054097249083574e14929974ecd7
-
SHA256
8ad2c16853ef58cee198a1d00ef05d8b4ecdfa20feb1adf9d244543460e130a6
-
SHA512
6c00b731901ebbd0d4a564966c623b6118f820a6ea1b3bd19f6bdacb13aff0472e36fcbcf02fe31d72cadb38572a9afbfc3baf9257fd49884778b920522ec168
Static task
static1
Malware Config
Extracted
redline
udptest
193.56.146.64:65441
Targets
-
-
Target
8ad2c16853ef58cee198a1d00ef05d8b4ecdfa20feb1adf9d244543460e130a6
-
Size
294KB
-
MD5
16f82a8d9fcb5c050278489c02417038
-
SHA1
bc8e4447c9f9054097249083574e14929974ecd7
-
SHA256
8ad2c16853ef58cee198a1d00ef05d8b4ecdfa20feb1adf9d244543460e130a6
-
SHA512
6c00b731901ebbd0d4a564966c623b6118f820a6ea1b3bd19f6bdacb13aff0472e36fcbcf02fe31d72cadb38572a9afbfc3baf9257fd49884778b920522ec168
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-