General
-
Target
460023fbe9697803c2a77a235479d69bfd6a97444b1d7b1650ca89e57694ef79
-
Size
410KB
-
Sample
211105-n3w7eagghr
-
MD5
d339ac891e9179c5d7f287395afbb891
-
SHA1
635b6869d5a446cb4bd62c1f4a615017219f1313
-
SHA256
460023fbe9697803c2a77a235479d69bfd6a97444b1d7b1650ca89e57694ef79
-
SHA512
ca73306c2cc700f3ad5409de6942094f567d3b85049f0398cc2bd77d05dd6282931316a73bcdba5fab9fa2ace16d7d06ab785bc9cef2e49b6eb08549c2188846
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
460023fbe9697803c2a77a235479d69bfd6a97444b1d7b1650ca89e57694ef79
-
Size
410KB
-
MD5
d339ac891e9179c5d7f287395afbb891
-
SHA1
635b6869d5a446cb4bd62c1f4a615017219f1313
-
SHA256
460023fbe9697803c2a77a235479d69bfd6a97444b1d7b1650ca89e57694ef79
-
SHA512
ca73306c2cc700f3ad5409de6942094f567d3b85049f0398cc2bd77d05dd6282931316a73bcdba5fab9fa2ace16d7d06ab785bc9cef2e49b6eb08549c2188846
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-