General
-
Target
718934812a617d3ae5e5a5eff03049cf71a75079c1ef9e7f1a7f3f8214dd21f3
-
Size
357KB
-
Sample
230321-jhvqmabc3w
-
MD5
e7a49504fa4713a327e73f1e658aa256
-
SHA1
194ba69d91b16f5dafa70c614c347ed7106e9280
-
SHA256
718934812a617d3ae5e5a5eff03049cf71a75079c1ef9e7f1a7f3f8214dd21f3
-
SHA512
d466af5076e8a038b37ce098e77189794af60fa7ced9cd118c87cf6de06cd2fd521e4b696d48c848680e319154a7846048ff4d09e5187754a4305767d8ef2e8b
-
SSDEEP
6144:yBqkLHpOZh1F754cfvT9SHdXQqJVGc0LuJ+IxzQD60stohD:yBqk1OZhz7acnZS9N5mu0o8D6VI
Static task
static1
Malware Config
Extracted
redline
fronx2
fronxtracking.com:80
-
auth_value
0a4100df2644a6a6582137d2da2c8bd1
Targets
-
-
Target
718934812a617d3ae5e5a5eff03049cf71a75079c1ef9e7f1a7f3f8214dd21f3
-
Size
357KB
-
MD5
e7a49504fa4713a327e73f1e658aa256
-
SHA1
194ba69d91b16f5dafa70c614c347ed7106e9280
-
SHA256
718934812a617d3ae5e5a5eff03049cf71a75079c1ef9e7f1a7f3f8214dd21f3
-
SHA512
d466af5076e8a038b37ce098e77189794af60fa7ced9cd118c87cf6de06cd2fd521e4b696d48c848680e319154a7846048ff4d09e5187754a4305767d8ef2e8b
-
SSDEEP
6144:yBqkLHpOZh1F754cfvT9SHdXQqJVGc0LuJ+IxzQD60stohD:yBqk1OZhz7acnZS9N5mu0o8D6VI
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-