General
-
Target
93294643db670f6f44f6a95a3f19b813d889f68dc1dd3c74fc72645444f4ab2e
-
Size
407KB
-
Sample
211017-tf2q9scga2
-
MD5
e5ab3d41fc60758771434f427b70d111
-
SHA1
763f94dffd6f4f59277dabbe45fcb9dfca8d9549
-
SHA256
93294643db670f6f44f6a95a3f19b813d889f68dc1dd3c74fc72645444f4ab2e
-
SHA512
e8b8230da0643afac847752ea008149a3aaf574fa7f9fe28f5f3a48b6e8dd923255f2821a8c9955786312d1817ae5d1dccc2539be2b8bfeac7e830d842612809
Static task
static1
Malware Config
Extracted
redline
sewPalp
185.215.113.29:24645
Targets
-
-
Target
93294643db670f6f44f6a95a3f19b813d889f68dc1dd3c74fc72645444f4ab2e
-
Size
407KB
-
MD5
e5ab3d41fc60758771434f427b70d111
-
SHA1
763f94dffd6f4f59277dabbe45fcb9dfca8d9549
-
SHA256
93294643db670f6f44f6a95a3f19b813d889f68dc1dd3c74fc72645444f4ab2e
-
SHA512
e8b8230da0643afac847752ea008149a3aaf574fa7f9fe28f5f3a48b6e8dd923255f2821a8c9955786312d1817ae5d1dccc2539be2b8bfeac7e830d842612809
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-