General
-
Target
fc2445d52e695c7339778f394c559e6f3f16889947900fce5ff5b2fa2c7dddfa
-
Size
360KB
-
Sample
211103-lcseesdea4
-
MD5
98b3762502ed43a82c8336678a263343
-
SHA1
1eda49657560d2870e2697d5228b6645d44c6afb
-
SHA256
fc2445d52e695c7339778f394c559e6f3f16889947900fce5ff5b2fa2c7dddfa
-
SHA512
f1e5c6849b5f744f56b7a93acd30f8931e1430db33fea3d5c9013139c25991b74c44136cca80d132958b25ee98d95841fddd6e281be729337486fce9f4112cdc
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
fc2445d52e695c7339778f394c559e6f3f16889947900fce5ff5b2fa2c7dddfa
-
Size
360KB
-
MD5
98b3762502ed43a82c8336678a263343
-
SHA1
1eda49657560d2870e2697d5228b6645d44c6afb
-
SHA256
fc2445d52e695c7339778f394c559e6f3f16889947900fce5ff5b2fa2c7dddfa
-
SHA512
f1e5c6849b5f744f56b7a93acd30f8931e1430db33fea3d5c9013139c25991b74c44136cca80d132958b25ee98d95841fddd6e281be729337486fce9f4112cdc
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-