General
-
Target
bf4b2ed4bf21b2785dae516b669b5d9ac4e0420d2f8183b691f183c76555c221
-
Size
377KB
-
Sample
220617-jwk4cabaer
-
MD5
5604d92fe68de1f8809d97ddb97f35a4
-
SHA1
cc18fd0a5c5af813e082157146c372526a4256b8
-
SHA256
bf4b2ed4bf21b2785dae516b669b5d9ac4e0420d2f8183b691f183c76555c221
-
SHA512
f09466667125fb7f77cfc873d6a7118ab76d91303501aaf03499f42771fada156c982d47da9a491445eeeb700355ac25b79720610fd85da4fb099d249e6ba884
Static task
static1
Malware Config
Extracted
redline
META
193.106.191.245:23196
-
auth_value
2ea67e19fe494687c77a179004b4a1c8
Targets
-
-
Target
bf4b2ed4bf21b2785dae516b669b5d9ac4e0420d2f8183b691f183c76555c221
-
Size
377KB
-
MD5
5604d92fe68de1f8809d97ddb97f35a4
-
SHA1
cc18fd0a5c5af813e082157146c372526a4256b8
-
SHA256
bf4b2ed4bf21b2785dae516b669b5d9ac4e0420d2f8183b691f183c76555c221
-
SHA512
f09466667125fb7f77cfc873d6a7118ab76d91303501aaf03499f42771fada156c982d47da9a491445eeeb700355ac25b79720610fd85da4fb099d249e6ba884
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-