General
-
Target
b7a1ccd9ce622ccaaa54434108bc7d048c9dc4693d684accf74a78232b27eafd
-
Size
389KB
-
Sample
220627-mdqsnaadep
-
MD5
196728de6d3649cfe5f210ab58036ebb
-
SHA1
e7678838bb8ab81ef9002e5a91ae710008e86592
-
SHA256
b7a1ccd9ce622ccaaa54434108bc7d048c9dc4693d684accf74a78232b27eafd
-
SHA512
f178afe05fa2b6c66d351cd3b004f30b4c5c518909207db94719c020e3caf1fc77a533a2f4748c546ee3772f6619024333979724a69cefcee9758aa3025e1e7e
Static task
static1
Malware Config
Extracted
redline
RUZKI
193.106.191.246:23196
-
auth_value
121027c094f768a0a0e9b562f6417952
Targets
-
-
Target
b7a1ccd9ce622ccaaa54434108bc7d048c9dc4693d684accf74a78232b27eafd
-
Size
389KB
-
MD5
196728de6d3649cfe5f210ab58036ebb
-
SHA1
e7678838bb8ab81ef9002e5a91ae710008e86592
-
SHA256
b7a1ccd9ce622ccaaa54434108bc7d048c9dc4693d684accf74a78232b27eafd
-
SHA512
f178afe05fa2b6c66d351cd3b004f30b4c5c518909207db94719c020e3caf1fc77a533a2f4748c546ee3772f6619024333979724a69cefcee9758aa3025e1e7e
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-