General
-
Target
d27b2b8bc6f9e95d5ebec82083ec8952f33daf2b7ab4fc0ce9812e265fa0df83
-
Size
387KB
-
Sample
220117-dx72lsgfc3
-
MD5
45a80d4856ec35f2c0827e0800a92587
-
SHA1
e230b4a479cfa95df334ec3d02d07bac8c1157eb
-
SHA256
d27b2b8bc6f9e95d5ebec82083ec8952f33daf2b7ab4fc0ce9812e265fa0df83
-
SHA512
3a9a3731aa916258779e1d27638e63fde6f47500bd09b00c73cbda8fea4855ca0043f0b48bcd9527377541b3ded23140f4d2a33399ac8ba258326709d71e1522
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:34865
Targets
-
-
Target
d27b2b8bc6f9e95d5ebec82083ec8952f33daf2b7ab4fc0ce9812e265fa0df83
-
Size
387KB
-
MD5
45a80d4856ec35f2c0827e0800a92587
-
SHA1
e230b4a479cfa95df334ec3d02d07bac8c1157eb
-
SHA256
d27b2b8bc6f9e95d5ebec82083ec8952f33daf2b7ab4fc0ce9812e265fa0df83
-
SHA512
3a9a3731aa916258779e1d27638e63fde6f47500bd09b00c73cbda8fea4855ca0043f0b48bcd9527377541b3ded23140f4d2a33399ac8ba258326709d71e1522
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-