General
-
Target
deb8d4b4990f8bc34a70284b037ef33a4e9f24911b465554c5ca97bd605cbb08
-
Size
317KB
-
Sample
211014-g9g8hagbhm
-
MD5
a6c363f8473515a3a73e79f7a9fd9612
-
SHA1
0bcf7fb0344276bb601fde77ff2d53ceea301ee8
-
SHA256
deb8d4b4990f8bc34a70284b037ef33a4e9f24911b465554c5ca97bd605cbb08
-
SHA512
1685d816a24b04227f59385b672bcbd4b6813313caeae73cb6459f319e520b0003293e80acfc88574e5ab27685a39a68c26b49e3be84a0b31465d17d3fcbf2b7
Static task
static1
Malware Config
Extracted
redline
sewPalp
185.215.113.29:24645
Targets
-
-
Target
deb8d4b4990f8bc34a70284b037ef33a4e9f24911b465554c5ca97bd605cbb08
-
Size
317KB
-
MD5
a6c363f8473515a3a73e79f7a9fd9612
-
SHA1
0bcf7fb0344276bb601fde77ff2d53ceea301ee8
-
SHA256
deb8d4b4990f8bc34a70284b037ef33a4e9f24911b465554c5ca97bd605cbb08
-
SHA512
1685d816a24b04227f59385b672bcbd4b6813313caeae73cb6459f319e520b0003293e80acfc88574e5ab27685a39a68c26b49e3be84a0b31465d17d3fcbf2b7
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-