General
-
Target
9851880a02d0d47218587d4472dc2e459d7bf415de27af60539d6aa7b2f10c84
-
Size
378KB
-
Sample
220525-e4x1nagdh6
-
MD5
ef653318ac4f52480c8869601390e776
-
SHA1
ae371d2a6867334a3f66370b143d4acc48086517
-
SHA256
9851880a02d0d47218587d4472dc2e459d7bf415de27af60539d6aa7b2f10c84
-
SHA512
b2a99d895356cddb2678d4436e2566e0f8ae438a060ef98be46cff6f87ff749a72f3961c27a021e0973353fcea68e7483b8d00ff262919fdc78d8b6d8616e842
Static task
static1
Malware Config
Extracted
redline
top
185.215.113.75:81
-
auth_value
ff6259bc2baf33b54b454aad484fb0ee
Targets
-
-
Target
9851880a02d0d47218587d4472dc2e459d7bf415de27af60539d6aa7b2f10c84
-
Size
378KB
-
MD5
ef653318ac4f52480c8869601390e776
-
SHA1
ae371d2a6867334a3f66370b143d4acc48086517
-
SHA256
9851880a02d0d47218587d4472dc2e459d7bf415de27af60539d6aa7b2f10c84
-
SHA512
b2a99d895356cddb2678d4436e2566e0f8ae438a060ef98be46cff6f87ff749a72f3961c27a021e0973353fcea68e7483b8d00ff262919fdc78d8b6d8616e842
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-