General
-
Target
fb39c19f6d3eebfc829c51e82aef24efe0dc59985c101858785046e0449b77f7
-
Size
363KB
-
Sample
211103-yx3gcacacq
-
MD5
edd3ce05a7b61531b233f97455889188
-
SHA1
107edc51a81f40a518621ebfafe166fb2f4df77f
-
SHA256
fb39c19f6d3eebfc829c51e82aef24efe0dc59985c101858785046e0449b77f7
-
SHA512
866825d7fb65a7bb5548ff0591fb8c21f6a58c322114ac7358a63c8c276d439319ce5ec15d5ca733577381423c45cabff90bbb4aba5d90bd8eb9169cdf549478
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
fb39c19f6d3eebfc829c51e82aef24efe0dc59985c101858785046e0449b77f7
-
Size
363KB
-
MD5
edd3ce05a7b61531b233f97455889188
-
SHA1
107edc51a81f40a518621ebfafe166fb2f4df77f
-
SHA256
fb39c19f6d3eebfc829c51e82aef24efe0dc59985c101858785046e0449b77f7
-
SHA512
866825d7fb65a7bb5548ff0591fb8c21f6a58c322114ac7358a63c8c276d439319ce5ec15d5ca733577381423c45cabff90bbb4aba5d90bd8eb9169cdf549478
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-