General
-
Target
cb893bc13909b98d1a72b5883237ab3bbde28be3c4e247d225fa01fd6e7e6391
-
Size
389KB
-
Sample
220626-qlnj2sdae4
-
MD5
c3a2603f9a68e271c57ef1c71a71b1fb
-
SHA1
9fb068c5839677f8713d82c09f2034cc07c86428
-
SHA256
cb893bc13909b98d1a72b5883237ab3bbde28be3c4e247d225fa01fd6e7e6391
-
SHA512
f485ce8c74d62a04a4c426dd7ce11b973f11b719391264893ab8a5c806228198799605100ae3f0214d865bac6c20678e061b7e94d2ed04368bc52a152418700f
Static task
static1
Malware Config
Extracted
redline
RUZKI
193.106.191.246:23196
-
auth_value
121027c094f768a0a0e9b562f6417952
Targets
-
-
Target
cb893bc13909b98d1a72b5883237ab3bbde28be3c4e247d225fa01fd6e7e6391
-
Size
389KB
-
MD5
c3a2603f9a68e271c57ef1c71a71b1fb
-
SHA1
9fb068c5839677f8713d82c09f2034cc07c86428
-
SHA256
cb893bc13909b98d1a72b5883237ab3bbde28be3c4e247d225fa01fd6e7e6391
-
SHA512
f485ce8c74d62a04a4c426dd7ce11b973f11b719391264893ab8a5c806228198799605100ae3f0214d865bac6c20678e061b7e94d2ed04368bc52a152418700f
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-