General
-
Target
07c3fb89bccdb5ef1b84d4d24576fb18ee399eda8a4f03aacef670268935a0d5
-
Size
389KB
-
Sample
220616-t1ky9aaeh9
-
MD5
830dc53ba197a8c80f90bcca07aea81d
-
SHA1
9ab47d13f3b83af3cd7e5740d395be69923020e0
-
SHA256
07c3fb89bccdb5ef1b84d4d24576fb18ee399eda8a4f03aacef670268935a0d5
-
SHA512
53fd8edafdf785ca24fac4793a8588fc27945c1265c8918b370bb02402019e3d0d4e0e881b0e1c743e781c8fadb0bb584065cfb0d2e3c338dd9ff2b9653ec837
Static task
static1
Malware Config
Extracted
redline
META
193.106.191.245:23196
-
auth_value
2ea67e19fe494687c77a179004b4a1c8
Targets
-
-
Target
07c3fb89bccdb5ef1b84d4d24576fb18ee399eda8a4f03aacef670268935a0d5
-
Size
389KB
-
MD5
830dc53ba197a8c80f90bcca07aea81d
-
SHA1
9ab47d13f3b83af3cd7e5740d395be69923020e0
-
SHA256
07c3fb89bccdb5ef1b84d4d24576fb18ee399eda8a4f03aacef670268935a0d5
-
SHA512
53fd8edafdf785ca24fac4793a8588fc27945c1265c8918b370bb02402019e3d0d4e0e881b0e1c743e781c8fadb0bb584065cfb0d2e3c338dd9ff2b9653ec837
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-