General
-
Target
2e669d1b07f2963318168e8dbb35b06f2b8e0ac0d5bd48d0924a8b26365d0155
-
Size
379KB
-
Sample
220523-vc4l5affa3
-
MD5
2e31c8c4bd0610ef12640a54ad9a7089
-
SHA1
9d7198a8ec65c19be8e0c583d4f4fe41629b8132
-
SHA256
2e669d1b07f2963318168e8dbb35b06f2b8e0ac0d5bd48d0924a8b26365d0155
-
SHA512
204aae33d11aa078fb4c516e3f572f7fe143e84cf8337d66469e0565baf5ff36560db0731071e8fcd7354396d5b21ac304fd859b1d5c963a5adbe26f40d33831
Static task
static1
Malware Config
Extracted
redline
meta1
193.106.191.182:23196
-
auth_value
9a16ce2cecb89012977449117f5e8d58
Targets
-
-
Target
2e669d1b07f2963318168e8dbb35b06f2b8e0ac0d5bd48d0924a8b26365d0155
-
Size
379KB
-
MD5
2e31c8c4bd0610ef12640a54ad9a7089
-
SHA1
9d7198a8ec65c19be8e0c583d4f4fe41629b8132
-
SHA256
2e669d1b07f2963318168e8dbb35b06f2b8e0ac0d5bd48d0924a8b26365d0155
-
SHA512
204aae33d11aa078fb4c516e3f572f7fe143e84cf8337d66469e0565baf5ff36560db0731071e8fcd7354396d5b21ac304fd859b1d5c963a5adbe26f40d33831
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-