General
-
Target
9624dcd0be8ae624f512d55992458df3818ec94511aca023e570113d658277ff
-
Size
422KB
-
Sample
220618-v9gtmaacfj
-
MD5
5bcb34aa1485f6aa87021ba8e12fd9a3
-
SHA1
0d4cf51c604f8b95ad3bfc6ab95510f9e019ebbe
-
SHA256
9624dcd0be8ae624f512d55992458df3818ec94511aca023e570113d658277ff
-
SHA512
affd94a2860e71063056665c086c5218281f6ae37b623563b8ccf00728589628038be2874195bcf74efc593b51f1c5449861a99fdac317634f8b01235a4209d9
Static task
static1
Malware Config
Extracted
redline
META
193.106.191.245:23196
-
auth_value
2ea67e19fe494687c77a179004b4a1c8
Targets
-
-
Target
9624dcd0be8ae624f512d55992458df3818ec94511aca023e570113d658277ff
-
Size
422KB
-
MD5
5bcb34aa1485f6aa87021ba8e12fd9a3
-
SHA1
0d4cf51c604f8b95ad3bfc6ab95510f9e019ebbe
-
SHA256
9624dcd0be8ae624f512d55992458df3818ec94511aca023e570113d658277ff
-
SHA512
affd94a2860e71063056665c086c5218281f6ae37b623563b8ccf00728589628038be2874195bcf74efc593b51f1c5449861a99fdac317634f8b01235a4209d9
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-