General
-
Target
5916fbe2a48c64041de62d604bbc2714373aa88358f73654e7b75ebb60b448b4
-
Size
409KB
-
Sample
220519-zajamabfe6
-
MD5
2f577d396b1775e09de6c1264b360db3
-
SHA1
f3786b545f1156227b7f0cc375c78adc15e45218
-
SHA256
5916fbe2a48c64041de62d604bbc2714373aa88358f73654e7b75ebb60b448b4
-
SHA512
5099f833db34c84041b11adb24656195505168ee935578b2e16e3176eef960cc3fc2a5a9b5c8c3b5f6857ca6012712b445d94ac70d5ab3db4ceb640c5c64c697
Static task
static1
Malware Config
Extracted
redline
test1
185.215.113.75:80
-
auth_value
7ab4a4e2eae9eb7ae10f64f68df53bb3
Targets
-
-
Target
5916fbe2a48c64041de62d604bbc2714373aa88358f73654e7b75ebb60b448b4
-
Size
409KB
-
MD5
2f577d396b1775e09de6c1264b360db3
-
SHA1
f3786b545f1156227b7f0cc375c78adc15e45218
-
SHA256
5916fbe2a48c64041de62d604bbc2714373aa88358f73654e7b75ebb60b448b4
-
SHA512
5099f833db34c84041b11adb24656195505168ee935578b2e16e3176eef960cc3fc2a5a9b5c8c3b5f6857ca6012712b445d94ac70d5ab3db4ceb640c5c64c697
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-