General
-
Target
4ac64c9eee1d52b075ff0c3374a6a3ca20288bd36f4ddcf538ae0648880452b0
-
Size
358KB
-
Sample
230321-k5pzbsbd7z
-
MD5
aa7fd4248110b57c2d389ca60d4e6a5c
-
SHA1
2e9df1a7842a6af2ca508cd329642d81f1ba937e
-
SHA256
4ac64c9eee1d52b075ff0c3374a6a3ca20288bd36f4ddcf538ae0648880452b0
-
SHA512
edfeea942e268e318256b0c51c35e5c7c5a38098f5fb4f920ca7cf72f8db66d17047e8f769ca2542653e66f295ff2d73ab013ad9ffc7f94ee2ce3e128363f9fc
-
SSDEEP
6144:BBqvLQbOZFCx88e+h2JvipVCKQHXzesH6MpvQ3CGcwvbip:BBqv8OZFS88rCsVkelMpvQ3Yii
Static task
static1
Malware Config
Extracted
redline
fronx2
fronxtracking.com:80
-
auth_value
0a4100df2644a6a6582137d2da2c8bd1
Targets
-
-
Target
4ac64c9eee1d52b075ff0c3374a6a3ca20288bd36f4ddcf538ae0648880452b0
-
Size
358KB
-
MD5
aa7fd4248110b57c2d389ca60d4e6a5c
-
SHA1
2e9df1a7842a6af2ca508cd329642d81f1ba937e
-
SHA256
4ac64c9eee1d52b075ff0c3374a6a3ca20288bd36f4ddcf538ae0648880452b0
-
SHA512
edfeea942e268e318256b0c51c35e5c7c5a38098f5fb4f920ca7cf72f8db66d17047e8f769ca2542653e66f295ff2d73ab013ad9ffc7f94ee2ce3e128363f9fc
-
SSDEEP
6144:BBqvLQbOZFCx88e+h2JvipVCKQHXzesH6MpvQ3CGcwvbip:BBqv8OZFS88rCsVkelMpvQ3Yii
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-