General
-
Target
31de222b60251da8169b2fba60a8e9d2a9894d158a658c088a84f37c7ed1fcbd
-
Size
243KB
-
Sample
211104-r7slkaeabn
-
MD5
882665ea59434a717f304c5b5f23e53a
-
SHA1
40f031961c1457149bc1f840397c883f858c7eb9
-
SHA256
31de222b60251da8169b2fba60a8e9d2a9894d158a658c088a84f37c7ed1fcbd
-
SHA512
8f6ff96dbf3f64e2569a8dc41f93b26722baaa48442030f79457e5dd0175327ebe9edc840160929ee5f569acf16ab5f67908b96de2d6fcfd74d57d696aca6614
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
31de222b60251da8169b2fba60a8e9d2a9894d158a658c088a84f37c7ed1fcbd
-
Size
243KB
-
MD5
882665ea59434a717f304c5b5f23e53a
-
SHA1
40f031961c1457149bc1f840397c883f858c7eb9
-
SHA256
31de222b60251da8169b2fba60a8e9d2a9894d158a658c088a84f37c7ed1fcbd
-
SHA512
8f6ff96dbf3f64e2569a8dc41f93b26722baaa48442030f79457e5dd0175327ebe9edc840160929ee5f569acf16ab5f67908b96de2d6fcfd74d57d696aca6614
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-