General
-
Target
827e3c725d40d537f04a01e776c21d4af20aaddd4191555f8b90cf7c4158d7a4
-
Size
439KB
-
Sample
220121-y1bsssbcen
-
MD5
b42a70a96423e8379ab169ba122b2a10
-
SHA1
6bc950f845e316fb9391389129291c26d836ee99
-
SHA256
827e3c725d40d537f04a01e776c21d4af20aaddd4191555f8b90cf7c4158d7a4
-
SHA512
2af44037335477c3ed80d3977e3303224205515ab46bc49a7515cb1e73f63bdf768c04a14c03496a5cdc02717c73d211cfeeff12677e184be3f70aae2df6afd9
Static task
static1
Malware Config
Extracted
redline
NONAME
45.9.20.111:1355
Targets
-
-
Target
827e3c725d40d537f04a01e776c21d4af20aaddd4191555f8b90cf7c4158d7a4
-
Size
439KB
-
MD5
b42a70a96423e8379ab169ba122b2a10
-
SHA1
6bc950f845e316fb9391389129291c26d836ee99
-
SHA256
827e3c725d40d537f04a01e776c21d4af20aaddd4191555f8b90cf7c4158d7a4
-
SHA512
2af44037335477c3ed80d3977e3303224205515ab46bc49a7515cb1e73f63bdf768c04a14c03496a5cdc02717c73d211cfeeff12677e184be3f70aae2df6afd9
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-