General
-
Target
4652a6ca0c3e89dd5a43195305c6dc115a023a48d2208cc8ef81bfc0c22e3b42
-
Size
416KB
-
Sample
220113-qg9lqaaecn
-
MD5
2c90bd63b91e5179b26e0ec5cdbff6ff
-
SHA1
e5328f5ec107bf74d1807b64e8f3730809c52404
-
SHA256
4652a6ca0c3e89dd5a43195305c6dc115a023a48d2208cc8ef81bfc0c22e3b42
-
SHA512
62a77e4a2ceb3339ad6056894cd876efc500705851ddc1279c8658a1177d155335a08567a48e33647ccd369012acc12986e20b1d8052687375bd663efaec7495
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:34865
Targets
-
-
Target
4652a6ca0c3e89dd5a43195305c6dc115a023a48d2208cc8ef81bfc0c22e3b42
-
Size
416KB
-
MD5
2c90bd63b91e5179b26e0ec5cdbff6ff
-
SHA1
e5328f5ec107bf74d1807b64e8f3730809c52404
-
SHA256
4652a6ca0c3e89dd5a43195305c6dc115a023a48d2208cc8ef81bfc0c22e3b42
-
SHA512
62a77e4a2ceb3339ad6056894cd876efc500705851ddc1279c8658a1177d155335a08567a48e33647ccd369012acc12986e20b1d8052687375bd663efaec7495
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-