General
-
Target
34ab815e6a4a3a535326c44c0b86afaca1b4396d09aee8b9617776a2f6dcf79d
-
Size
394KB
-
Sample
211127-dlssjsbee4
-
MD5
5c58bf61b09e036d7415a971eb7ea789
-
SHA1
54eed6720500b050c0c03a5b2b0c82228b8e22f9
-
SHA256
34ab815e6a4a3a535326c44c0b86afaca1b4396d09aee8b9617776a2f6dcf79d
-
SHA512
5930abd644a34ffb506b724c558fe6d44318cc493fec58491b2b4001a236bedf1169c946bcfad06bd38e9c4d6a5f6e3ed90eaf134b4cb321a23ec34aaa34b325
Static task
static1
Malware Config
Extracted
redline
Pubdate
193.56.146.64:65441
Targets
-
-
Target
34ab815e6a4a3a535326c44c0b86afaca1b4396d09aee8b9617776a2f6dcf79d
-
Size
394KB
-
MD5
5c58bf61b09e036d7415a971eb7ea789
-
SHA1
54eed6720500b050c0c03a5b2b0c82228b8e22f9
-
SHA256
34ab815e6a4a3a535326c44c0b86afaca1b4396d09aee8b9617776a2f6dcf79d
-
SHA512
5930abd644a34ffb506b724c558fe6d44318cc493fec58491b2b4001a236bedf1169c946bcfad06bd38e9c4d6a5f6e3ed90eaf134b4cb321a23ec34aaa34b325
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-