General
-
Target
bde57abf9af98b719b29022214b9d54fe97f958ab2b5ccc9ea08d3ba4f6edb8c
-
Size
358KB
-
Sample
230321-j8r3eshd26
-
MD5
98953484225f25eb391164c53e3ba400
-
SHA1
59e298eafdfd1f7aa991a6b584b5d165276be4b5
-
SHA256
bde57abf9af98b719b29022214b9d54fe97f958ab2b5ccc9ea08d3ba4f6edb8c
-
SHA512
11eb75bed276da150b7abfb5644ca953f73ebd74d8d1b438b7c90c273f79902dc11d400cb107cbc213c5d69b218b587f5c75e9a3b17d2eebe52923420ca498b1
-
SSDEEP
6144:4UBqOLhyOZsCV990usOjffs8u3SKZ1/eK60Asyz2GqyMjy0OSjnU:4UBqOAOZs+9bsQfnuiKH1RAsy2He+jn
Static task
static1
Malware Config
Extracted
redline
fronx2
fronxtracking.com:80
-
auth_value
0a4100df2644a6a6582137d2da2c8bd1
Targets
-
-
Target
bde57abf9af98b719b29022214b9d54fe97f958ab2b5ccc9ea08d3ba4f6edb8c
-
Size
358KB
-
MD5
98953484225f25eb391164c53e3ba400
-
SHA1
59e298eafdfd1f7aa991a6b584b5d165276be4b5
-
SHA256
bde57abf9af98b719b29022214b9d54fe97f958ab2b5ccc9ea08d3ba4f6edb8c
-
SHA512
11eb75bed276da150b7abfb5644ca953f73ebd74d8d1b438b7c90c273f79902dc11d400cb107cbc213c5d69b218b587f5c75e9a3b17d2eebe52923420ca498b1
-
SSDEEP
6144:4UBqOLhyOZsCV990usOjffs8u3SKZ1/eK60Asyz2GqyMjy0OSjnU:4UBqOAOZs+9bsQfnuiKH1RAsy2He+jn
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-