General
-
Target
4ff15e8eccf707ee63d92fe252794803b22dbf1776b004f1fcc87bee31717ee2
-
Size
408KB
-
Sample
220522-qsln2aabf3
-
MD5
de0d5078205ca67517ae929c17f45281
-
SHA1
44affa80c1ffd71b68923d6b23a210b668b0cd9e
-
SHA256
4ff15e8eccf707ee63d92fe252794803b22dbf1776b004f1fcc87bee31717ee2
-
SHA512
1df7dde60e529680639a43a5146f07c9a6af4a9c45fdb491ce5609ba85d2c2247029002690e9c1d38e421dfebf2dde010f0527e0847928ebe99a2c828622b390
Static task
static1
Malware Config
Extracted
redline
meta1
193.106.191.182:23196
-
auth_value
9a16ce2cecb89012977449117f5e8d58
Targets
-
-
Target
4ff15e8eccf707ee63d92fe252794803b22dbf1776b004f1fcc87bee31717ee2
-
Size
408KB
-
MD5
de0d5078205ca67517ae929c17f45281
-
SHA1
44affa80c1ffd71b68923d6b23a210b668b0cd9e
-
SHA256
4ff15e8eccf707ee63d92fe252794803b22dbf1776b004f1fcc87bee31717ee2
-
SHA512
1df7dde60e529680639a43a5146f07c9a6af4a9c45fdb491ce5609ba85d2c2247029002690e9c1d38e421dfebf2dde010f0527e0847928ebe99a2c828622b390
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-