General
-
Target
b81f31eb7c8a55b7404e91f5506eec3daf9f8b67205ef07fcf1e45e28e0b34a0
-
Size
428KB
-
Sample
220115-bnemlacbbn
-
MD5
6e417f67a090d9a4240ecab5231dcf10
-
SHA1
7a92136e1c0d2658064463bb52c06d329ce3cacf
-
SHA256
b81f31eb7c8a55b7404e91f5506eec3daf9f8b67205ef07fcf1e45e28e0b34a0
-
SHA512
8779987736ede8defcdf55bf85b7a7e03425ab8f9d7db657589c99e11eadea1a9390901c0b1053d7db0f437d5d77f3afa940e78efc242c8305ae4ad32902328d
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:34865
Targets
-
-
Target
b81f31eb7c8a55b7404e91f5506eec3daf9f8b67205ef07fcf1e45e28e0b34a0
-
Size
428KB
-
MD5
6e417f67a090d9a4240ecab5231dcf10
-
SHA1
7a92136e1c0d2658064463bb52c06d329ce3cacf
-
SHA256
b81f31eb7c8a55b7404e91f5506eec3daf9f8b67205ef07fcf1e45e28e0b34a0
-
SHA512
8779987736ede8defcdf55bf85b7a7e03425ab8f9d7db657589c99e11eadea1a9390901c0b1053d7db0f437d5d77f3afa940e78efc242c8305ae4ad32902328d
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-