General
-
Target
554856c73772eeaf942a9b79fab982fd65484573cdf1cc9e2cbb1746e6f83be6
-
Size
242KB
-
Sample
211104-x1639shdg9
-
MD5
8e801279f06e676fc183c042f212f2b0
-
SHA1
2475aa39872b07a5250406b856d09947e04cbc06
-
SHA256
554856c73772eeaf942a9b79fab982fd65484573cdf1cc9e2cbb1746e6f83be6
-
SHA512
bd0c0df301ca87fa06f9d14dd19a38d7df8fe90a23f9db27901e4f1f61a83b7dad2129678717382d2f645d6c0702ef763c65676e9089ec9a0b768014e8e05ec1
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
554856c73772eeaf942a9b79fab982fd65484573cdf1cc9e2cbb1746e6f83be6
-
Size
242KB
-
MD5
8e801279f06e676fc183c042f212f2b0
-
SHA1
2475aa39872b07a5250406b856d09947e04cbc06
-
SHA256
554856c73772eeaf942a9b79fab982fd65484573cdf1cc9e2cbb1746e6f83be6
-
SHA512
bd0c0df301ca87fa06f9d14dd19a38d7df8fe90a23f9db27901e4f1f61a83b7dad2129678717382d2f645d6c0702ef763c65676e9089ec9a0b768014e8e05ec1
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-