General
-
Target
8064d750794ffb2649578a15b4f3b518128704b57c19f24af427451d48f0220c
-
Size
406KB
-
Sample
211017-rvs2kadecj
-
MD5
057565dc23c22291acff0c5467d57b5c
-
SHA1
386c89a750fe3c1875a32788dfe04f3f8ab5d75e
-
SHA256
8064d750794ffb2649578a15b4f3b518128704b57c19f24af427451d48f0220c
-
SHA512
b3d3188545c1d7beb7eb84cb563b0e43d51263ccdabd1ca7ebec9d7ba442c1dabe452f16a9077a9b23d571316d9f4a31fbb40095bb4cd8bbebc38d9c9bda30dc
Static task
static1
Malware Config
Extracted
redline
sewPalp
185.215.113.29:24645
Targets
-
-
Target
8064d750794ffb2649578a15b4f3b518128704b57c19f24af427451d48f0220c
-
Size
406KB
-
MD5
057565dc23c22291acff0c5467d57b5c
-
SHA1
386c89a750fe3c1875a32788dfe04f3f8ab5d75e
-
SHA256
8064d750794ffb2649578a15b4f3b518128704b57c19f24af427451d48f0220c
-
SHA512
b3d3188545c1d7beb7eb84cb563b0e43d51263ccdabd1ca7ebec9d7ba442c1dabe452f16a9077a9b23d571316d9f4a31fbb40095bb4cd8bbebc38d9c9bda30dc
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-