General
-
Target
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c
-
Size
352KB
-
Sample
220811-j22y2scgdr
-
MD5
312096992dabaa78f39001149136f69f
-
SHA1
f95fccb283b6da9e0dc22f39e9a72b540e1f1445
-
SHA256
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c
-
SHA512
6b531587ff25f8de76d48ee11da348dddb65411d9fd3b2958760202e812e4f9a8eed767cf55284fd50f123985e5d4a86b179258211fe74b02a8b338682185b9c
Static task
static1
Malware Config
Extracted
redline
ruzki
193.106.191.165:39482
-
auth_value
71a0558c0eea274a5bd617ea85786884
Targets
-
-
Target
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c
-
Size
352KB
-
MD5
312096992dabaa78f39001149136f69f
-
SHA1
f95fccb283b6da9e0dc22f39e9a72b540e1f1445
-
SHA256
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c
-
SHA512
6b531587ff25f8de76d48ee11da348dddb65411d9fd3b2958760202e812e4f9a8eed767cf55284fd50f123985e5d4a86b179258211fe74b02a8b338682185b9c
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-