General
-
Target
1dfdf3859de5c22276ee840477b134fd1c9bcc6a221ddecea0848a479818d2db
-
Size
292KB
-
Sample
220526-s193psgefr
-
MD5
e09a29d8ddee81a156f2e4316353ee66
-
SHA1
dc74f8af49a12dc1da8fcb7f7710a69c3c63d716
-
SHA256
1dfdf3859de5c22276ee840477b134fd1c9bcc6a221ddecea0848a479818d2db
-
SHA512
ff18ae9e7ea4a6fd6c5c921b289ae837edb01e10dec48c0d0340542a742ae72def0d2fb6e10f723370285c8c8bb212c92ac271d4cc3ce1406c5b5e6dca382fcc
Static task
static1
Malware Config
Extracted
redline
top
185.215.113.75:81
-
auth_value
ff6259bc2baf33b54b454aad484fb0ee
Targets
-
-
Target
1dfdf3859de5c22276ee840477b134fd1c9bcc6a221ddecea0848a479818d2db
-
Size
292KB
-
MD5
e09a29d8ddee81a156f2e4316353ee66
-
SHA1
dc74f8af49a12dc1da8fcb7f7710a69c3c63d716
-
SHA256
1dfdf3859de5c22276ee840477b134fd1c9bcc6a221ddecea0848a479818d2db
-
SHA512
ff18ae9e7ea4a6fd6c5c921b289ae837edb01e10dec48c0d0340542a742ae72def0d2fb6e10f723370285c8c8bb212c92ac271d4cc3ce1406c5b5e6dca382fcc
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-