General
-
Target
e8061c4a5d44143d2b0df94c2563f57e8518eea615c25c9263954a2e54e72cf0
-
Size
362KB
-
Sample
230327-1jpz7sfd58
-
MD5
50bed3c6bba6670db4c9867393328d90
-
SHA1
6739115ec4db3c6107b69386c665373c4bba4d99
-
SHA256
e8061c4a5d44143d2b0df94c2563f57e8518eea615c25c9263954a2e54e72cf0
-
SHA512
77fbcdf3311161d037933d70bb7d73958f0544f4854eb2bca44bf002b82b4a293536541915ae7666f451fbce5e062477ab1d49d9b50dab2ebc0d2590453019ae
-
SSDEEP
6144:2CF5yUCQYLtIrS9cFYih8wDhJuMRFRvowlszw5NXQteVtAK:PQQYZIrQLi2wDWM9oyaaNgG
Static task
static1
Malware Config
Extracted
redline
@chicago
185.11.61.125:22344
-
auth_value
21f863e0cbd09d0681058e068d0d1d7f
Targets
-
-
Target
e8061c4a5d44143d2b0df94c2563f57e8518eea615c25c9263954a2e54e72cf0
-
Size
362KB
-
MD5
50bed3c6bba6670db4c9867393328d90
-
SHA1
6739115ec4db3c6107b69386c665373c4bba4d99
-
SHA256
e8061c4a5d44143d2b0df94c2563f57e8518eea615c25c9263954a2e54e72cf0
-
SHA512
77fbcdf3311161d037933d70bb7d73958f0544f4854eb2bca44bf002b82b4a293536541915ae7666f451fbce5e062477ab1d49d9b50dab2ebc0d2590453019ae
-
SSDEEP
6144:2CF5yUCQYLtIrS9cFYih8wDhJuMRFRvowlszw5NXQteVtAK:PQQYZIrQLi2wDWM9oyaaNgG
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-