General
-
Target
efdfd6707b7c665e2786b7e81e08d0c9e9c50c66a6630e4557e0ef4a1f1ff99a
-
Size
407KB
-
Sample
220521-1j3ajadef6
-
MD5
ac099b380b07f4daf38978c521e2e317
-
SHA1
8424d9e1611b8ab788e22e2e03ab350765d036bf
-
SHA256
efdfd6707b7c665e2786b7e81e08d0c9e9c50c66a6630e4557e0ef4a1f1ff99a
-
SHA512
2c485802aaf9488bb1a66eaa647918147870e731e4e51bdd3c749d367fdb968f9cb2efb3beb521ed9101614241908e8e7440f5f63674181592588ad4bc80a589
Static task
static1
Malware Config
Extracted
redline
test1
185.215.113.75:80
-
auth_value
7ab4a4e2eae9eb7ae10f64f68df53bb3
Targets
-
-
Target
efdfd6707b7c665e2786b7e81e08d0c9e9c50c66a6630e4557e0ef4a1f1ff99a
-
Size
407KB
-
MD5
ac099b380b07f4daf38978c521e2e317
-
SHA1
8424d9e1611b8ab788e22e2e03ab350765d036bf
-
SHA256
efdfd6707b7c665e2786b7e81e08d0c9e9c50c66a6630e4557e0ef4a1f1ff99a
-
SHA512
2c485802aaf9488bb1a66eaa647918147870e731e4e51bdd3c749d367fdb968f9cb2efb3beb521ed9101614241908e8e7440f5f63674181592588ad4bc80a589
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-