General
-
Target
a142658357a85843315190f655286dc1ad9bcaff555439a3cdd016a74f9cd008
-
Size
384KB
-
Sample
220523-glknqabha3
-
MD5
7f7e26b04c0fe574b27c6c9af9edeeaa
-
SHA1
ae47845a55a1e82d14f499e7dc1e1fb74dbe6beb
-
SHA256
a142658357a85843315190f655286dc1ad9bcaff555439a3cdd016a74f9cd008
-
SHA512
cabedcfaaa0081aace3dab87006e01bbf100d44433c400068dfcd22fb0222e0788d1591b3f98cb178e711e13e35de17c185a3c758e90e0a614ebee287685a947
Static task
static1
Malware Config
Extracted
redline
meta1
193.106.191.182:23196
-
auth_value
9a16ce2cecb89012977449117f5e8d58
Targets
-
-
Target
a142658357a85843315190f655286dc1ad9bcaff555439a3cdd016a74f9cd008
-
Size
384KB
-
MD5
7f7e26b04c0fe574b27c6c9af9edeeaa
-
SHA1
ae47845a55a1e82d14f499e7dc1e1fb74dbe6beb
-
SHA256
a142658357a85843315190f655286dc1ad9bcaff555439a3cdd016a74f9cd008
-
SHA512
cabedcfaaa0081aace3dab87006e01bbf100d44433c400068dfcd22fb0222e0788d1591b3f98cb178e711e13e35de17c185a3c758e90e0a614ebee287685a947
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-