General
-
Target
6589844350130033ea9f060f8a1dd8624f3fb89e0dcf544a31d203f6ba42d4c2
-
Size
390KB
-
Sample
220616-rg9r6aaad5
-
MD5
d5c6777bcecff88accd729f0300c339e
-
SHA1
136e618b9bdc407f161b5bf70500ee9421ba5724
-
SHA256
6589844350130033ea9f060f8a1dd8624f3fb89e0dcf544a31d203f6ba42d4c2
-
SHA512
90c819f592944e6da4708708c72fe60dda0584821fb543581457f516936d7f295c83a8f8fc4475f2c1779267cddadd7b06739d39dff29ba2689efa1c869b4ac8
Static task
static1
Malware Config
Extracted
redline
META
193.106.191.245:23196
-
auth_value
2ea67e19fe494687c77a179004b4a1c8
Targets
-
-
Target
6589844350130033ea9f060f8a1dd8624f3fb89e0dcf544a31d203f6ba42d4c2
-
Size
390KB
-
MD5
d5c6777bcecff88accd729f0300c339e
-
SHA1
136e618b9bdc407f161b5bf70500ee9421ba5724
-
SHA256
6589844350130033ea9f060f8a1dd8624f3fb89e0dcf544a31d203f6ba42d4c2
-
SHA512
90c819f592944e6da4708708c72fe60dda0584821fb543581457f516936d7f295c83a8f8fc4475f2c1779267cddadd7b06739d39dff29ba2689efa1c869b4ac8
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-