General
-
Target
d68fad791e2d3771948a9091500c01ee1ab74fe39dc9b762a4af98f5173d54a4
-
Size
366KB
-
Sample
211015-tgsvrabbd2
-
MD5
26067c0d2ab49c1db0dd17b25cda0497
-
SHA1
16cb3695eef88005769b6a838989ca0406aa0263
-
SHA256
d68fad791e2d3771948a9091500c01ee1ab74fe39dc9b762a4af98f5173d54a4
-
SHA512
3b86a9aede66781d7c007a1e3179cbbb2b918fa416154118068f5cd66b0f092e5ed640e97039390a76c3551bc9171a36750aa60fe78b9e171e276e02680150fd
Static task
static1
Malware Config
Extracted
redline
sewPalp
185.215.113.29:24645
Targets
-
-
Target
d68fad791e2d3771948a9091500c01ee1ab74fe39dc9b762a4af98f5173d54a4
-
Size
366KB
-
MD5
26067c0d2ab49c1db0dd17b25cda0497
-
SHA1
16cb3695eef88005769b6a838989ca0406aa0263
-
SHA256
d68fad791e2d3771948a9091500c01ee1ab74fe39dc9b762a4af98f5173d54a4
-
SHA512
3b86a9aede66781d7c007a1e3179cbbb2b918fa416154118068f5cd66b0f092e5ed640e97039390a76c3551bc9171a36750aa60fe78b9e171e276e02680150fd
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-