General
-
Target
710b035a0554bc1a5b9533e65ac73e4b9236b617bd765a1a35264cbca28d92c4
-
Size
504KB
-
Sample
221110-3hsqtahcgq
-
MD5
995ea89ed9a274c8eae57b7ce4f6f5e8
-
SHA1
82d9a9f6b3a02a570f600cc94c831905f75cc195
-
SHA256
710b035a0554bc1a5b9533e65ac73e4b9236b617bd765a1a35264cbca28d92c4
-
SHA512
ca820a723e7a4f8282f05800b64933317864a3d434f29c432ae312c8d584cc0a44c74bafe67c97ee3133d3e146174da9481e6b6daaa679d49eb0c6327a3c3d54
-
SSDEEP
6144:4YnWwraL0o3K1/ZkDQ5dvDkkRiWHU2Ji2WP7ZGmMNgIdjtpGxIyBpNnDPV/36fj0:4Y6Ao3m/CDacx2JinM3jtTsDPUql
Static task
static1
Malware Config
Extracted
redline
neruzki
193.106.191.22:47242
-
auth_value
be14ae67c6dd227f622680a27ea42452
Targets
-
-
Target
710b035a0554bc1a5b9533e65ac73e4b9236b617bd765a1a35264cbca28d92c4
-
Size
504KB
-
MD5
995ea89ed9a274c8eae57b7ce4f6f5e8
-
SHA1
82d9a9f6b3a02a570f600cc94c831905f75cc195
-
SHA256
710b035a0554bc1a5b9533e65ac73e4b9236b617bd765a1a35264cbca28d92c4
-
SHA512
ca820a723e7a4f8282f05800b64933317864a3d434f29c432ae312c8d584cc0a44c74bafe67c97ee3133d3e146174da9481e6b6daaa679d49eb0c6327a3c3d54
-
SSDEEP
6144:4YnWwraL0o3K1/ZkDQ5dvDkkRiWHU2Ji2WP7ZGmMNgIdjtpGxIyBpNnDPV/36fj0:4Y6Ao3m/CDacx2JinM3jtTsDPUql
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-