General
-
Target
7bc590996efecdb8864e1e535ecda27990f78108e9ce4c642a3c1f9bce3de7bb
-
Size
284KB
-
Sample
230320-tm5fqsec93
-
MD5
be4cd419236fdecb292f3346eb452847
-
SHA1
cce5f13de70c2d20e559782fb40ffe5fe795a4f0
-
SHA256
7bc590996efecdb8864e1e535ecda27990f78108e9ce4c642a3c1f9bce3de7bb
-
SHA512
574c9cef83bc72f847832a074e696e1b6e457fbcd1e7d0774b91270a73341e116567a384ca47409550c1a3c21f4b818e259fd544f80c3a02ba3a84b00b5b98fb
-
SSDEEP
6144:6mkqdg0HUjyqV9aMaAjfIw6cOT8U5AjRe9/fEOHNpcKtnst4:PkquuqV9aMaisP5AK3VtzKt
Static task
static1
Malware Config
Extracted
redline
fronx2
fronxtracking.com:80
-
auth_value
0a4100df2644a6a6582137d2da2c8bd1
Targets
-
-
Target
7bc590996efecdb8864e1e535ecda27990f78108e9ce4c642a3c1f9bce3de7bb
-
Size
284KB
-
MD5
be4cd419236fdecb292f3346eb452847
-
SHA1
cce5f13de70c2d20e559782fb40ffe5fe795a4f0
-
SHA256
7bc590996efecdb8864e1e535ecda27990f78108e9ce4c642a3c1f9bce3de7bb
-
SHA512
574c9cef83bc72f847832a074e696e1b6e457fbcd1e7d0774b91270a73341e116567a384ca47409550c1a3c21f4b818e259fd544f80c3a02ba3a84b00b5b98fb
-
SSDEEP
6144:6mkqdg0HUjyqV9aMaAjfIw6cOT8U5AjRe9/fEOHNpcKtnst4:PkquuqV9aMaisP5AK3VtzKt
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-