General
-
Target
5c646aa07e432c19d8e2ae2bbc140d74d88da14adb571a681e8c0e9889bb7552
-
Size
407KB
-
Sample
220527-n278aaafb9
-
MD5
b16908062349212b0f77109c5df320f4
-
SHA1
c7697c470d5c850ba67046d9682b1503ff59dfb4
-
SHA256
5c646aa07e432c19d8e2ae2bbc140d74d88da14adb571a681e8c0e9889bb7552
-
SHA512
f83bb66b7ae56993400a763dacc80958d2c9897278f0cc191ff018724db71627c61086683e1e203262f52879dc4e476a58288b7637b2d22b7e1a2a554e01965e
Static task
static1
Malware Config
Extracted
redline
top
185.215.113.75:81
-
auth_value
ff6259bc2baf33b54b454aad484fb0ee
Targets
-
-
Target
5c646aa07e432c19d8e2ae2bbc140d74d88da14adb571a681e8c0e9889bb7552
-
Size
407KB
-
MD5
b16908062349212b0f77109c5df320f4
-
SHA1
c7697c470d5c850ba67046d9682b1503ff59dfb4
-
SHA256
5c646aa07e432c19d8e2ae2bbc140d74d88da14adb571a681e8c0e9889bb7552
-
SHA512
f83bb66b7ae56993400a763dacc80958d2c9897278f0cc191ff018724db71627c61086683e1e203262f52879dc4e476a58288b7637b2d22b7e1a2a554e01965e
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-