General
-
Target
086ff7f298f0a51bfaf264432244743cfa96e59e88b938d91b5da0e4b30abdd6
-
Size
414KB
-
Sample
211105-ha76baagd5
-
MD5
4635d1d6d38e67fc82f6d5a543c8756c
-
SHA1
0db342fb3592fcb3c483876099191e5062410763
-
SHA256
086ff7f298f0a51bfaf264432244743cfa96e59e88b938d91b5da0e4b30abdd6
-
SHA512
91946193d21a0caab5d49b1f0a1d5756bb0ce1c99b56d2fc8a5dc895461d50dc46c7246f94a76067fb7662f3c2c91e5a244b42ae51042f380d19ae74eb41eda1
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
086ff7f298f0a51bfaf264432244743cfa96e59e88b938d91b5da0e4b30abdd6
-
Size
414KB
-
MD5
4635d1d6d38e67fc82f6d5a543c8756c
-
SHA1
0db342fb3592fcb3c483876099191e5062410763
-
SHA256
086ff7f298f0a51bfaf264432244743cfa96e59e88b938d91b5da0e4b30abdd6
-
SHA512
91946193d21a0caab5d49b1f0a1d5756bb0ce1c99b56d2fc8a5dc895461d50dc46c7246f94a76067fb7662f3c2c91e5a244b42ae51042f380d19ae74eb41eda1
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-