General
-
Target
448b04d5350b8ec4f0879c5a144e189e9ee44d86ea236172282c308b653b4636
-
Size
411KB
-
Sample
211105-s4af9acbe3
-
MD5
87c8f29422b1f6ff45150cc113ca2e08
-
SHA1
f9b81f908158393afd43a6df48dba20cffeea0e9
-
SHA256
448b04d5350b8ec4f0879c5a144e189e9ee44d86ea236172282c308b653b4636
-
SHA512
6fb3abca5618250ebc109c6167276e089e7a5388db87d4a54ba2f1371a4e673155299f6d78c1f8f6969b9efa75acbfbdd86a28eb13fe891875d89189b0b3e70a
Static task
static1
Malware Config
Extracted
redline
SomeBody
185.215.113.29:36224
Targets
-
-
Target
448b04d5350b8ec4f0879c5a144e189e9ee44d86ea236172282c308b653b4636
-
Size
411KB
-
MD5
87c8f29422b1f6ff45150cc113ca2e08
-
SHA1
f9b81f908158393afd43a6df48dba20cffeea0e9
-
SHA256
448b04d5350b8ec4f0879c5a144e189e9ee44d86ea236172282c308b653b4636
-
SHA512
6fb3abca5618250ebc109c6167276e089e7a5388db87d4a54ba2f1371a4e673155299f6d78c1f8f6969b9efa75acbfbdd86a28eb13fe891875d89189b0b3e70a
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-