General
-
Target
https://www61.zippyshare.com/v/kZ4ebgi3/file.html
-
Sample
220307-k4p8pscea4
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www61.zippyshare.com/v/kZ4ebgi3/file.html
Resource
win10-20220223-en
windows10_x64
0 signatures
0 seconds
Malware Config
Extracted
Family
redline
Botnet
10
C2
185.198.164.33:80
Attributes
-
auth_value
df7a70cfbf2d75e687d721399a93f863
Targets
-
-
Target
https://www61.zippyshare.com/v/kZ4ebgi3/file.html
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-