General
-
Target
af0eb2a817cce79765adde18a63058577b739a651690cadcba85d19033b154a5
-
Size
414KB
-
Sample
211105-ldppxsgdan
-
MD5
e743dd499c787feb79e1ced5d08cbf88
-
SHA1
c99b1a822f7050d609cd8e3c18c39dbf8ed3a235
-
SHA256
af0eb2a817cce79765adde18a63058577b739a651690cadcba85d19033b154a5
-
SHA512
552f494f3a0e9ea2c82d49132de271dbc1866293e11925972bf53885048010779a8939ddb6c386cd27dcde5363db70f601ac539cc482b3390bd0f3e947994488
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
af0eb2a817cce79765adde18a63058577b739a651690cadcba85d19033b154a5
-
Size
414KB
-
MD5
e743dd499c787feb79e1ced5d08cbf88
-
SHA1
c99b1a822f7050d609cd8e3c18c39dbf8ed3a235
-
SHA256
af0eb2a817cce79765adde18a63058577b739a651690cadcba85d19033b154a5
-
SHA512
552f494f3a0e9ea2c82d49132de271dbc1866293e11925972bf53885048010779a8939ddb6c386cd27dcde5363db70f601ac539cc482b3390bd0f3e947994488
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-