General
-
Target
59f7ed6adfcb57daec4a670bfdc25ceed6c5a1a6affdc3a26c2c22496fef061a
-
Size
343KB
-
Sample
230329-y6g7rshg67
-
MD5
ad1958b98c6c1b164c6e08611f3bca4e
-
SHA1
3d8b880a2418e6fc6347003ed575599a7dfb01c5
-
SHA256
59f7ed6adfcb57daec4a670bfdc25ceed6c5a1a6affdc3a26c2c22496fef061a
-
SHA512
f3f2a71e2ee333dc391aca2198b242f0ee5b6fa8d1e0081a7670f58f87bdb58fe920752bf5039d44381759d7a1090cb6d18cc72a7edde65120dc67590d48f4e7
-
SSDEEP
6144:yAVaiMoLI1W4aqtTN+GwQRMyZltu+Jg1gyjHa92IEjU0Mr5x:taiDs1W4xA7QuyZltjJWa92IEjHM
Static task
static1
Malware Config
Extracted
redline
frtrack
francestracking.com:80
-
auth_value
f2f94b780071d26409283a3478312faf
Targets
-
-
Target
59f7ed6adfcb57daec4a670bfdc25ceed6c5a1a6affdc3a26c2c22496fef061a
-
Size
343KB
-
MD5
ad1958b98c6c1b164c6e08611f3bca4e
-
SHA1
3d8b880a2418e6fc6347003ed575599a7dfb01c5
-
SHA256
59f7ed6adfcb57daec4a670bfdc25ceed6c5a1a6affdc3a26c2c22496fef061a
-
SHA512
f3f2a71e2ee333dc391aca2198b242f0ee5b6fa8d1e0081a7670f58f87bdb58fe920752bf5039d44381759d7a1090cb6d18cc72a7edde65120dc67590d48f4e7
-
SSDEEP
6144:yAVaiMoLI1W4aqtTN+GwQRMyZltu+Jg1gyjHa92IEjU0Mr5x:taiDs1W4xA7QuyZltjJWa92IEjHM
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-