General
-
Target
2a8258f08b477ac1a9a8028e2ab962075be80e3b568d172720623c1a900cf296
-
Size
239KB
-
Sample
211104-gqdqzadadl
-
MD5
bce986f0b5a816a6f4c3f0e44fce11c9
-
SHA1
d43941d6a293911f6464c2f82642462759e87c39
-
SHA256
2a8258f08b477ac1a9a8028e2ab962075be80e3b568d172720623c1a900cf296
-
SHA512
a50e6da8dcef8a035c7bcb37d0ca31db7de01be15e66ed3744cc175af4cfe30c8acefa86b073649b8b1f4b38aac5fec45ccc680d3440a56c4a32ceff745cea6b
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
2a8258f08b477ac1a9a8028e2ab962075be80e3b568d172720623c1a900cf296
-
Size
239KB
-
MD5
bce986f0b5a816a6f4c3f0e44fce11c9
-
SHA1
d43941d6a293911f6464c2f82642462759e87c39
-
SHA256
2a8258f08b477ac1a9a8028e2ab962075be80e3b568d172720623c1a900cf296
-
SHA512
a50e6da8dcef8a035c7bcb37d0ca31db7de01be15e66ed3744cc175af4cfe30c8acefa86b073649b8b1f4b38aac5fec45ccc680d3440a56c4a32ceff745cea6b
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-