General
-
Target
51b5b5e382d2aee794fd183dfc019a6b8c4ace41f14b27303c4a76bea3e3df32
-
Size
397KB
-
Sample
220812-sfsb6aghe8
-
MD5
7bdc2588bdbaad7e2ccd41536b122a3a
-
SHA1
b510b7a305a0e0f8849af4d6a0d0db2562fb107d
-
SHA256
51b5b5e382d2aee794fd183dfc019a6b8c4ace41f14b27303c4a76bea3e3df32
-
SHA512
7b2ec76ad4f103fd7f43d9b07144bbf9d804c7844507e30404b29b080943388bf610f666668b6e76e33fb51642c7648c64b3f8262b70b4dd05b09e198d595b56
Static task
static1
Malware Config
Extracted
redline
ruzki
193.106.191.165:39482
-
auth_value
71a0558c0eea274a5bd617ea85786884
Targets
-
-
Target
51b5b5e382d2aee794fd183dfc019a6b8c4ace41f14b27303c4a76bea3e3df32
-
Size
397KB
-
MD5
7bdc2588bdbaad7e2ccd41536b122a3a
-
SHA1
b510b7a305a0e0f8849af4d6a0d0db2562fb107d
-
SHA256
51b5b5e382d2aee794fd183dfc019a6b8c4ace41f14b27303c4a76bea3e3df32
-
SHA512
7b2ec76ad4f103fd7f43d9b07144bbf9d804c7844507e30404b29b080943388bf610f666668b6e76e33fb51642c7648c64b3f8262b70b4dd05b09e198d595b56
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-