General
-
Target
f66476d0a4a22b967c420cbf15086b5c2023433985d00f30fb670eb7cf730f7b
-
Size
411KB
-
Sample
211105-qfb9tsbgf8
-
MD5
806c3ac330db980f1cefb8f71b6a89ca
-
SHA1
d66fb044e2454e67957259c6ba6e1ce98b39768a
-
SHA256
f66476d0a4a22b967c420cbf15086b5c2023433985d00f30fb670eb7cf730f7b
-
SHA512
32629f54959111047e5db7d6192dce2eaf14917bede4e9271af61ed3fa74c83845ae719f621b922f05c8bc3c2d5097fc4a433035200656a9e851317cbfcc5d5f
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
f66476d0a4a22b967c420cbf15086b5c2023433985d00f30fb670eb7cf730f7b
-
Size
411KB
-
MD5
806c3ac330db980f1cefb8f71b6a89ca
-
SHA1
d66fb044e2454e67957259c6ba6e1ce98b39768a
-
SHA256
f66476d0a4a22b967c420cbf15086b5c2023433985d00f30fb670eb7cf730f7b
-
SHA512
32629f54959111047e5db7d6192dce2eaf14917bede4e9271af61ed3fa74c83845ae719f621b922f05c8bc3c2d5097fc4a433035200656a9e851317cbfcc5d5f
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-