General
-
Target
c2431588581ed6698d0724a6bb7d9e4eab487c523f322f48cc21ec28411f1d83
-
Size
370KB
-
Sample
211015-vkgsbsbbe7
-
MD5
2a11d39791af91931345ee3652c347bc
-
SHA1
64af3040ac0b20ff63e01934d4f0ca6af98e44d5
-
SHA256
c2431588581ed6698d0724a6bb7d9e4eab487c523f322f48cc21ec28411f1d83
-
SHA512
9a772b145cff02fefda8893a1c8b99df7e87fb8299e3421509ced89ac9e6d041002c26187e5d3ee9c5ec7995fb0fcff89dfa270b67b5a9f51a567d5fe19a826c
Static task
static1
Malware Config
Extracted
redline
sewPalp
185.215.113.29:24645
Targets
-
-
Target
c2431588581ed6698d0724a6bb7d9e4eab487c523f322f48cc21ec28411f1d83
-
Size
370KB
-
MD5
2a11d39791af91931345ee3652c347bc
-
SHA1
64af3040ac0b20ff63e01934d4f0ca6af98e44d5
-
SHA256
c2431588581ed6698d0724a6bb7d9e4eab487c523f322f48cc21ec28411f1d83
-
SHA512
9a772b145cff02fefda8893a1c8b99df7e87fb8299e3421509ced89ac9e6d041002c26187e5d3ee9c5ec7995fb0fcff89dfa270b67b5a9f51a567d5fe19a826c
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-