General
-
Target
4fa52a6441fedfc19067a3aab66a127005a9c8cc60770bb772dff9fc805658c1
-
Size
362KB
-
Sample
211103-rgrataeab4
-
MD5
7113d5eebe836d80ad8fc9e4a63a5d76
-
SHA1
19fa03ed56033f7d5d633beeef76369234541e78
-
SHA256
4fa52a6441fedfc19067a3aab66a127005a9c8cc60770bb772dff9fc805658c1
-
SHA512
aa54d5c00b27e8a0d1a2f95d10b7178a9b988006331685e5b26818d16ad6e2ab3dcddbab3aad80694a86779b65b8f9fe19662d6ade53882d273667d2810ff99c
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
4fa52a6441fedfc19067a3aab66a127005a9c8cc60770bb772dff9fc805658c1
-
Size
362KB
-
MD5
7113d5eebe836d80ad8fc9e4a63a5d76
-
SHA1
19fa03ed56033f7d5d633beeef76369234541e78
-
SHA256
4fa52a6441fedfc19067a3aab66a127005a9c8cc60770bb772dff9fc805658c1
-
SHA512
aa54d5c00b27e8a0d1a2f95d10b7178a9b988006331685e5b26818d16ad6e2ab3dcddbab3aad80694a86779b65b8f9fe19662d6ade53882d273667d2810ff99c
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-