General
-
Target
e26e33cf43282ee619fb42dda11d2dc9891240c5d3c86de383dbc07ac4270bb4
-
Size
442KB
-
Sample
220810-xjchbsfgb3
-
MD5
45632922b184c5e1604b321a57ec5747
-
SHA1
6ecb49bae4765dfbfc81dd0233a8fd85014bc9c6
-
SHA256
e26e33cf43282ee619fb42dda11d2dc9891240c5d3c86de383dbc07ac4270bb4
-
SHA512
be7f1630f72c30ff87c2da9551f4556984de1f3fe35aea683ad24032aa68bf9c7d46e637359dc377c0dd2cff3c5ec0171797680f8eea7a09a5b8c4f64cabb841
Static task
static1
Malware Config
Extracted
redline
ruzki
193.106.191.165:39482
-
auth_value
71a0558c0eea274a5bd617ea85786884
Targets
-
-
Target
e26e33cf43282ee619fb42dda11d2dc9891240c5d3c86de383dbc07ac4270bb4
-
Size
442KB
-
MD5
45632922b184c5e1604b321a57ec5747
-
SHA1
6ecb49bae4765dfbfc81dd0233a8fd85014bc9c6
-
SHA256
e26e33cf43282ee619fb42dda11d2dc9891240c5d3c86de383dbc07ac4270bb4
-
SHA512
be7f1630f72c30ff87c2da9551f4556984de1f3fe35aea683ad24032aa68bf9c7d46e637359dc377c0dd2cff3c5ec0171797680f8eea7a09a5b8c4f64cabb841
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-