General
-
Target
35c48bad902f444bdf1514015ab33d309a525a5375fa44f2a6026b4379632b5d
-
Size
369KB
-
Sample
220514-zdgwzadhgn
-
MD5
5c3b80f727dfc29bc2b7c0533884af69
-
SHA1
3569ccfee5903f5f8fc5033c2edddfdae8c2843b
-
SHA256
35c48bad902f444bdf1514015ab33d309a525a5375fa44f2a6026b4379632b5d
-
SHA512
39b2b370c566ff3ea97bd6864d05ec4ee83e94db337c4b557657768573ac3344a4b159be1b0f34bf80b55662b12d006e146c369f296f7b93255d9b2e70ded339
Static task
static1
Malware Config
Extracted
redline
51
193.106.191.182:23196
-
auth_value
21351f5b8358ade7446b0c10ec81735e
Targets
-
-
Target
35c48bad902f444bdf1514015ab33d309a525a5375fa44f2a6026b4379632b5d
-
Size
369KB
-
MD5
5c3b80f727dfc29bc2b7c0533884af69
-
SHA1
3569ccfee5903f5f8fc5033c2edddfdae8c2843b
-
SHA256
35c48bad902f444bdf1514015ab33d309a525a5375fa44f2a6026b4379632b5d
-
SHA512
39b2b370c566ff3ea97bd6864d05ec4ee83e94db337c4b557657768573ac3344a4b159be1b0f34bf80b55662b12d006e146c369f296f7b93255d9b2e70ded339
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-