General
-
Target
68570ad84b8938131f7297dda3d1ff8ae7e36fdbd55ff3c6fced3158dc2bd909
-
Size
439KB
-
Sample
220121-2f4jvsbfb5
-
MD5
fd3e2f3eb3d99817d2618326f0225876
-
SHA1
1ebebe93a882a55bbb720335fba93d950c791bdc
-
SHA256
68570ad84b8938131f7297dda3d1ff8ae7e36fdbd55ff3c6fced3158dc2bd909
-
SHA512
a92401b58145b800b8ba7a8595b7ea5cc9a0c09127807dda1e4de9484ef6846d05b8ce7639922963cb18885b2351b772e75a49a134a60d2d6480de85782c86e5
Static task
static1
Malware Config
Extracted
redline
NONAME
45.9.20.111:1355
Targets
-
-
Target
68570ad84b8938131f7297dda3d1ff8ae7e36fdbd55ff3c6fced3158dc2bd909
-
Size
439KB
-
MD5
fd3e2f3eb3d99817d2618326f0225876
-
SHA1
1ebebe93a882a55bbb720335fba93d950c791bdc
-
SHA256
68570ad84b8938131f7297dda3d1ff8ae7e36fdbd55ff3c6fced3158dc2bd909
-
SHA512
a92401b58145b800b8ba7a8595b7ea5cc9a0c09127807dda1e4de9484ef6846d05b8ce7639922963cb18885b2351b772e75a49a134a60d2d6480de85782c86e5
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-