General
-
Target
3a465ef360b346e57dd4aa4136b0223a1e17e644885bf9032f9cfe2aaecffd0b
-
Size
290KB
-
Sample
230404-dclmwace84
-
MD5
b3824eed28c7a8aacae1fe4dde49f4e8
-
SHA1
6d0dd1cf24324b9accdf36bc31f6d50208c20861
-
SHA256
3a465ef360b346e57dd4aa4136b0223a1e17e644885bf9032f9cfe2aaecffd0b
-
SHA512
20957e1691e207ddf45eef6c38b516b02e4cf727107326cf756c0af6faf8f5c0c83073b32104b015116796150aac2471b0ec6cf086b26a17a9af23ebed748165
-
SSDEEP
6144:HXOibluCc8UsWYA+BKizgbMLVnAQkjyZDF8Q:3BkOAyKCAiJA1uZDR
Static task
static1
Malware Config
Extracted
redline
@chicago
185.11.61.125:22344
-
auth_value
21f863e0cbd09d0681058e068d0d1d7f
Targets
-
-
Target
3a465ef360b346e57dd4aa4136b0223a1e17e644885bf9032f9cfe2aaecffd0b
-
Size
290KB
-
MD5
b3824eed28c7a8aacae1fe4dde49f4e8
-
SHA1
6d0dd1cf24324b9accdf36bc31f6d50208c20861
-
SHA256
3a465ef360b346e57dd4aa4136b0223a1e17e644885bf9032f9cfe2aaecffd0b
-
SHA512
20957e1691e207ddf45eef6c38b516b02e4cf727107326cf756c0af6faf8f5c0c83073b32104b015116796150aac2471b0ec6cf086b26a17a9af23ebed748165
-
SSDEEP
6144:HXOibluCc8UsWYA+BKizgbMLVnAQkjyZDF8Q:3BkOAyKCAiJA1uZDR
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-