General
-
Target
9b5de95d40186b9b380843a9f47279df43cf4fe4c665b506d1608143ca6320e6
-
Size
404KB
-
Sample
220524-nzne4acecn
-
MD5
cea138e591de007c091651bbc71ae647
-
SHA1
78698f13d83adbe4d86bde67492148396482c9bf
-
SHA256
9b5de95d40186b9b380843a9f47279df43cf4fe4c665b506d1608143ca6320e6
-
SHA512
87c552673f5d60af67775d01ad2e52a02fd71d1f9656cb8258271f935151d35a63180d202d694f244791cb2d03b8aad6ad25305f4ed70961bbffd63178a8bf70
Static task
static1
Malware Config
Extracted
redline
top
185.215.113.75:81
-
auth_value
ff6259bc2baf33b54b454aad484fb0ee
Targets
-
-
Target
9b5de95d40186b9b380843a9f47279df43cf4fe4c665b506d1608143ca6320e6
-
Size
404KB
-
MD5
cea138e591de007c091651bbc71ae647
-
SHA1
78698f13d83adbe4d86bde67492148396482c9bf
-
SHA256
9b5de95d40186b9b380843a9f47279df43cf4fe4c665b506d1608143ca6320e6
-
SHA512
87c552673f5d60af67775d01ad2e52a02fd71d1f9656cb8258271f935151d35a63180d202d694f244791cb2d03b8aad6ad25305f4ed70961bbffd63178a8bf70
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-