General
-
Target
01e5f4f24fd809ad587a3f2104d033239d9ba25caac8c161161b2586109ed395
-
Size
348KB
-
Sample
230403-elj13sea4z
-
MD5
d02f42679b4bb7ad604168e5477f30d2
-
SHA1
10c25adc83b22124489d59bfce063d4310cc229b
-
SHA256
01e5f4f24fd809ad587a3f2104d033239d9ba25caac8c161161b2586109ed395
-
SHA512
5a94e252ec7931ae9d6526515a8e2ba3a6c9ce78873115c6f191bf0b79b6c8a6a63a4822cca9462a41070d0127d14cddba3be25b87ea2bbed6980d2342916c6a
-
SSDEEP
6144:BVuxhw6zy2yhA5RWWsOFNeazu3+KdKmR/TZtkjt:B0xS6cW5IWsUaO4tGt
Static task
static1
Malware Config
Extracted
redline
@chicago
185.11.61.125:22344
-
auth_value
21f863e0cbd09d0681058e068d0d1d7f
Targets
-
-
Target
01e5f4f24fd809ad587a3f2104d033239d9ba25caac8c161161b2586109ed395
-
Size
348KB
-
MD5
d02f42679b4bb7ad604168e5477f30d2
-
SHA1
10c25adc83b22124489d59bfce063d4310cc229b
-
SHA256
01e5f4f24fd809ad587a3f2104d033239d9ba25caac8c161161b2586109ed395
-
SHA512
5a94e252ec7931ae9d6526515a8e2ba3a6c9ce78873115c6f191bf0b79b6c8a6a63a4822cca9462a41070d0127d14cddba3be25b87ea2bbed6980d2342916c6a
-
SSDEEP
6144:BVuxhw6zy2yhA5RWWsOFNeazu3+KdKmR/TZtkjt:B0xS6cW5IWsUaO4tGt
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-