General
-
Target
2057684366470d4f0ad384baa7a47d8882528d2bc7e43232ec3f30b28bd1f6c5
-
Size
408KB
-
Sample
220522-p8kw1aabb6
-
MD5
a0803580c10d030e04f573283c1a3cb6
-
SHA1
3b03e0dbc689a7688efee761ab12a821cb1a691c
-
SHA256
2057684366470d4f0ad384baa7a47d8882528d2bc7e43232ec3f30b28bd1f6c5
-
SHA512
d0e41878795ed9a0ce46b9f5a2d04b8945278efe816c313fa902a893b18ceb36628a91d2278a9afcd5f7bdfaf5496c488b594c5c76c266e7968e0ee6a5d69155
Static task
static1
Malware Config
Extracted
redline
meta1
193.106.191.182:23196
-
auth_value
9a16ce2cecb89012977449117f5e8d58
Targets
-
-
Target
2057684366470d4f0ad384baa7a47d8882528d2bc7e43232ec3f30b28bd1f6c5
-
Size
408KB
-
MD5
a0803580c10d030e04f573283c1a3cb6
-
SHA1
3b03e0dbc689a7688efee761ab12a821cb1a691c
-
SHA256
2057684366470d4f0ad384baa7a47d8882528d2bc7e43232ec3f30b28bd1f6c5
-
SHA512
d0e41878795ed9a0ce46b9f5a2d04b8945278efe816c313fa902a893b18ceb36628a91d2278a9afcd5f7bdfaf5496c488b594c5c76c266e7968e0ee6a5d69155
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-