General
-
Target
dd825d882852f4015e5a935eadc3b7f5c8cb380878e12aca2e646e4cccb66239
-
Size
392KB
-
Sample
220527-x6ax1shhc9
-
MD5
760a059ada20b6e50df22b95ed51d500
-
SHA1
475003efc334d5e3026c25cea9208fbde0ac2607
-
SHA256
dd825d882852f4015e5a935eadc3b7f5c8cb380878e12aca2e646e4cccb66239
-
SHA512
5ab32d91a95436a5abb7535c48db2437379767bddd825191c469e6aad36fb60b735e73f02112f0de07659b7c49c682a23d4f8d9b219f1124a6d3f1188df417b1
Static task
static1
Malware Config
Extracted
redline
top
185.215.113.75:81
-
auth_value
ff6259bc2baf33b54b454aad484fb0ee
Targets
-
-
Target
dd825d882852f4015e5a935eadc3b7f5c8cb380878e12aca2e646e4cccb66239
-
Size
392KB
-
MD5
760a059ada20b6e50df22b95ed51d500
-
SHA1
475003efc334d5e3026c25cea9208fbde0ac2607
-
SHA256
dd825d882852f4015e5a935eadc3b7f5c8cb380878e12aca2e646e4cccb66239
-
SHA512
5ab32d91a95436a5abb7535c48db2437379767bddd825191c469e6aad36fb60b735e73f02112f0de07659b7c49c682a23d4f8d9b219f1124a6d3f1188df417b1
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-