General
-
Target
eb7d61b4abdac766156f91a4118bd942550919f190d535996e0bcc2b318ac6c0
-
Size
370KB
-
Sample
211016-f7lx8sbga5
-
MD5
2ceb08aa82d8f26aeba06243072e158a
-
SHA1
b4ae66da7c0b813df1130656bf1b18cd7e04ea5b
-
SHA256
eb7d61b4abdac766156f91a4118bd942550919f190d535996e0bcc2b318ac6c0
-
SHA512
8523a22d4bb1bbdd7d73df5dc9034b320f5eac6d8b360496e8a8a3b94256688e5b39b69d2588cd7e705f1b13270175452274c6880df53453e390d7deb131e32a
Static task
static1
Malware Config
Extracted
redline
sewPalp
185.215.113.29:24645
Targets
-
-
Target
eb7d61b4abdac766156f91a4118bd942550919f190d535996e0bcc2b318ac6c0
-
Size
370KB
-
MD5
2ceb08aa82d8f26aeba06243072e158a
-
SHA1
b4ae66da7c0b813df1130656bf1b18cd7e04ea5b
-
SHA256
eb7d61b4abdac766156f91a4118bd942550919f190d535996e0bcc2b318ac6c0
-
SHA512
8523a22d4bb1bbdd7d73df5dc9034b320f5eac6d8b360496e8a8a3b94256688e5b39b69d2588cd7e705f1b13270175452274c6880df53453e390d7deb131e32a
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-