General
-
Target
cfbc3f416f2ea37d706e2b317dddcf958d96baedd12fe6b0640af597abea5533
-
Size
433KB
-
Sample
220118-fvnw3ahebj
-
MD5
46ae066d378f8380699e8be27b2be8ea
-
SHA1
b5357ade0760a123580a2958b25f38cfa8d2fa80
-
SHA256
cfbc3f416f2ea37d706e2b317dddcf958d96baedd12fe6b0640af597abea5533
-
SHA512
5af52c4ec09c88bc94dd64c3910907feee6c5871fbbc6a4248a5c90b943224d5d9cf54d19480f9b062fecf8bff20ca26498438e26d3764ae245a15c86c0eb52f
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:34865
Targets
-
-
Target
cfbc3f416f2ea37d706e2b317dddcf958d96baedd12fe6b0640af597abea5533
-
Size
433KB
-
MD5
46ae066d378f8380699e8be27b2be8ea
-
SHA1
b5357ade0760a123580a2958b25f38cfa8d2fa80
-
SHA256
cfbc3f416f2ea37d706e2b317dddcf958d96baedd12fe6b0640af597abea5533
-
SHA512
5af52c4ec09c88bc94dd64c3910907feee6c5871fbbc6a4248a5c90b943224d5d9cf54d19480f9b062fecf8bff20ca26498438e26d3764ae245a15c86c0eb52f
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-