General
-
Target
006e87d32bc99015247e89cf74e5ae51f9d3b4ba34d0f59a058683a62852eb47
-
Size
242KB
-
Sample
211104-p8nb5agfe4
-
MD5
7c03165e67d851b1e62f74e07f95cf72
-
SHA1
4eddd832579f4476e37fba9351b547ef223ce123
-
SHA256
006e87d32bc99015247e89cf74e5ae51f9d3b4ba34d0f59a058683a62852eb47
-
SHA512
4bccdfbf2ef76ccf322f0ae12b515922b2afdffd64431a13b4e4ec2a508332e298be4fddb9441f84fa5ed06cfb4abea98c33a10cd78b820b3c44b597c6a937a7
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
006e87d32bc99015247e89cf74e5ae51f9d3b4ba34d0f59a058683a62852eb47
-
Size
242KB
-
MD5
7c03165e67d851b1e62f74e07f95cf72
-
SHA1
4eddd832579f4476e37fba9351b547ef223ce123
-
SHA256
006e87d32bc99015247e89cf74e5ae51f9d3b4ba34d0f59a058683a62852eb47
-
SHA512
4bccdfbf2ef76ccf322f0ae12b515922b2afdffd64431a13b4e4ec2a508332e298be4fddb9441f84fa5ed06cfb4abea98c33a10cd78b820b3c44b597c6a937a7
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-