General
-
Target
1378f0e3cc988ac9e14d9c2d91981f183ec36a14092a6d2dfe05a082cc8b5619
-
Size
406KB
-
Sample
211017-sxjrcacfh2
-
MD5
25cf0fe2799257bc3f24d4a431b3e0d5
-
SHA1
57259c662abf4686130ced3cb1f9e2fc6fa9bd44
-
SHA256
1378f0e3cc988ac9e14d9c2d91981f183ec36a14092a6d2dfe05a082cc8b5619
-
SHA512
ca911c8e759243c3dfb6625eb40dff32039a849b469bb27162dbc4aed05cf9e6b7b2b90923fc9b00264febeb2a1a45f7a0a5b05a3d7cb6e0f206fe7ca3aff4d5
Static task
static1
Malware Config
Extracted
redline
sewPalp
185.215.113.29:24645
Targets
-
-
Target
1378f0e3cc988ac9e14d9c2d91981f183ec36a14092a6d2dfe05a082cc8b5619
-
Size
406KB
-
MD5
25cf0fe2799257bc3f24d4a431b3e0d5
-
SHA1
57259c662abf4686130ced3cb1f9e2fc6fa9bd44
-
SHA256
1378f0e3cc988ac9e14d9c2d91981f183ec36a14092a6d2dfe05a082cc8b5619
-
SHA512
ca911c8e759243c3dfb6625eb40dff32039a849b469bb27162dbc4aed05cf9e6b7b2b90923fc9b00264febeb2a1a45f7a0a5b05a3d7cb6e0f206fe7ca3aff4d5
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-