Description
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8
405KB
211125-vbddjsbbf6
010d09ac20e9c512b1d3e0a4cdc4ecd7
c3c0a152c2e1567d96bfe6c285f807aa260fa6a7
09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8
96bd3d38a61c5081604a5c132be41f19bf6de5ec9d93ff32213047320d5829d0d325ade6e7f795c89175cb135653492bc3eacd3f302dbd51b139ca681d37724d
Family | redline |
Botnet | udptest |
C2 |
193.56.146.64:65441 |
09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8
010d09ac20e9c512b1d3e0a4cdc4ecd7
405KB
c3c0a152c2e1567d96bfe6c285f807aa260fa6a7
09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8
96bd3d38a61c5081604a5c132be41f19bf6de5ec9d93ff32213047320d5829d0d325ade6e7f795c89175cb135653492bc3eacd3f302dbd51b139ca681d37724d
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Infostealers often target stored browser data, which can include saved credentials etc.
Looks up Uninstall key entries in the registry to enumerate software on the system.