General
-
Target
2718306d328d4c48c59f0402a06d5fc866718ed136136c20d44363a7addea0b3
-
Size
243KB
-
Sample
211104-z9pxfshfg6
-
MD5
2e580d7b75072409796520944374c363
-
SHA1
40b52e8c210a96ba7c994b927e9711fd6f5bbe1e
-
SHA256
2718306d328d4c48c59f0402a06d5fc866718ed136136c20d44363a7addea0b3
-
SHA512
bb86b9439ae45088c1d40702be2019f6607728fd78e34bb98107d6004f2589442997146c89f95e9e5c82879706e1bdab58ba877fc0dadebd907eddf7bcd3e37b
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
2718306d328d4c48c59f0402a06d5fc866718ed136136c20d44363a7addea0b3
-
Size
243KB
-
MD5
2e580d7b75072409796520944374c363
-
SHA1
40b52e8c210a96ba7c994b927e9711fd6f5bbe1e
-
SHA256
2718306d328d4c48c59f0402a06d5fc866718ed136136c20d44363a7addea0b3
-
SHA512
bb86b9439ae45088c1d40702be2019f6607728fd78e34bb98107d6004f2589442997146c89f95e9e5c82879706e1bdab58ba877fc0dadebd907eddf7bcd3e37b
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-