General
-
Target
247983c91bd95b53eaebdfc022ed99fcc4733ae8c4f568769870e2d5a0767131
-
Size
393KB
-
Sample
211127-g5396sccd9
-
MD5
6f7241eec4d7a41d703a9d4695d65c99
-
SHA1
efe61b71d0b3b7ecd5bc80adc3fd2bef97a2282b
-
SHA256
247983c91bd95b53eaebdfc022ed99fcc4733ae8c4f568769870e2d5a0767131
-
SHA512
0adcada0beb949c4ed67c4ac1e794d33307ccf22e51c2a4b3ce9e904b6390cece8e26280bd05e00043dc6322b2c7fea6134f81d05885132c1c27aa8578c2f0cd
Static task
static1
Malware Config
Extracted
redline
Updbdate
193.56.146.64:65441
Targets
-
-
Target
247983c91bd95b53eaebdfc022ed99fcc4733ae8c4f568769870e2d5a0767131
-
Size
393KB
-
MD5
6f7241eec4d7a41d703a9d4695d65c99
-
SHA1
efe61b71d0b3b7ecd5bc80adc3fd2bef97a2282b
-
SHA256
247983c91bd95b53eaebdfc022ed99fcc4733ae8c4f568769870e2d5a0767131
-
SHA512
0adcada0beb949c4ed67c4ac1e794d33307ccf22e51c2a4b3ce9e904b6390cece8e26280bd05e00043dc6322b2c7fea6134f81d05885132c1c27aa8578c2f0cd
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-