General
-
Target
7fb4a520b66f924ba618e26dc03b4f9d086bd4038fe521f3f61779961603829c
-
Size
343KB
-
Sample
230404-jv8s1sfe6t
-
MD5
315200c413c689cff012d3c7aa860d5e
-
SHA1
3d03f66972399938bb7df7cd41b8efcf2dfef54a
-
SHA256
7fb4a520b66f924ba618e26dc03b4f9d086bd4038fe521f3f61779961603829c
-
SHA512
25942b9bb2b0ffaefa03ecc197c7ed28d1f291e1fc4fd3361f2beed2e7c70f36e0e4b86021cc6477137b83d2a9c8c27443550871e632bddb6e0ab786effdb9ae
-
SSDEEP
6144:IRkh8ArXhH3rQTBqzCSUJFmq92BXrEsAlrFaW:I2hNrXh7aFmq4XVut
Static task
static1
Malware Config
Extracted
redline
@chicago
185.11.61.125:22344
-
auth_value
21f863e0cbd09d0681058e068d0d1d7f
Targets
-
-
Target
7fb4a520b66f924ba618e26dc03b4f9d086bd4038fe521f3f61779961603829c
-
Size
343KB
-
MD5
315200c413c689cff012d3c7aa860d5e
-
SHA1
3d03f66972399938bb7df7cd41b8efcf2dfef54a
-
SHA256
7fb4a520b66f924ba618e26dc03b4f9d086bd4038fe521f3f61779961603829c
-
SHA512
25942b9bb2b0ffaefa03ecc197c7ed28d1f291e1fc4fd3361f2beed2e7c70f36e0e4b86021cc6477137b83d2a9c8c27443550871e632bddb6e0ab786effdb9ae
-
SSDEEP
6144:IRkh8ArXhH3rQTBqzCSUJFmq92BXrEsAlrFaW:I2hNrXh7aFmq4XVut
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-