General
-
Target
351379bf31eef3f7f45e05cdc6c0066c0ccb209788010a14576b58dad2277e3f
-
Size
383KB
-
Sample
220602-3se8gafhep
-
MD5
2df37cebbb77cff9d372d1dcd2c9bcfb
-
SHA1
49c5963ff879ff2013d0f64a102061fd536cdd3f
-
SHA256
351379bf31eef3f7f45e05cdc6c0066c0ccb209788010a14576b58dad2277e3f
-
SHA512
2cb7b4f054493f2bc7f4d57f1dc82dd19ada54b9d0fddf7310ffd0aa16a881bc7378b31662f19fc53dcc17032271cfba73ddc6546094423fdd4afc92b7ff2737
Static task
static1
Malware Config
Extracted
redline
mx
193.106.191.222:23196
-
auth_value
8cfa634189948115f1f5e1900e4b66b6
Targets
-
-
Target
351379bf31eef3f7f45e05cdc6c0066c0ccb209788010a14576b58dad2277e3f
-
Size
383KB
-
MD5
2df37cebbb77cff9d372d1dcd2c9bcfb
-
SHA1
49c5963ff879ff2013d0f64a102061fd536cdd3f
-
SHA256
351379bf31eef3f7f45e05cdc6c0066c0ccb209788010a14576b58dad2277e3f
-
SHA512
2cb7b4f054493f2bc7f4d57f1dc82dd19ada54b9d0fddf7310ffd0aa16a881bc7378b31662f19fc53dcc17032271cfba73ddc6546094423fdd4afc92b7ff2737
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-