General
-
Target
16e2a416cd6be40ffeda43ac097c947105562105701734406b10e383f2c88711
-
Size
243KB
-
Sample
211104-rbbceaggd4
-
MD5
3739f03aff1e31de0500ba7f3fc3a1cf
-
SHA1
9b79f1fd8b9e1dfeccad7959b453f7e58e927e35
-
SHA256
16e2a416cd6be40ffeda43ac097c947105562105701734406b10e383f2c88711
-
SHA512
63dbc24f43ea23fc0526ca4768f9016a037270247ae1f7a97f4b4ad5600b78076d8ccee5e1051d3b8060c1307c16810b6839f8619fcb1d1b002b71d9647fb324
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
16e2a416cd6be40ffeda43ac097c947105562105701734406b10e383f2c88711
-
Size
243KB
-
MD5
3739f03aff1e31de0500ba7f3fc3a1cf
-
SHA1
9b79f1fd8b9e1dfeccad7959b453f7e58e927e35
-
SHA256
16e2a416cd6be40ffeda43ac097c947105562105701734406b10e383f2c88711
-
SHA512
63dbc24f43ea23fc0526ca4768f9016a037270247ae1f7a97f4b4ad5600b78076d8ccee5e1051d3b8060c1307c16810b6839f8619fcb1d1b002b71d9647fb324
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-