General
-
Target
63f4c93f86d79cdc3d93a4273627b6dd4df1e9293049872f1f150468737ed9ad
-
Size
386KB
-
Sample
220122-n1n31sahfk
-
MD5
e67a761399ba2b0d6b7d0a77450f99c7
-
SHA1
c4834379978164e29416eb73140dabb7250a3ccc
-
SHA256
63f4c93f86d79cdc3d93a4273627b6dd4df1e9293049872f1f150468737ed9ad
-
SHA512
dcb13b9cf22795cdb2fc4b0851dc40a662354fa45a1b5e32a96163097dd6e111e869c7f99750c764cff4cf82b9db24056959d56c502679deb16c4bcd9f4d5ca6
Static task
static1
Malware Config
Extracted
redline
NONAME
45.9.20.111:1355
Targets
-
-
Target
63f4c93f86d79cdc3d93a4273627b6dd4df1e9293049872f1f150468737ed9ad
-
Size
386KB
-
MD5
e67a761399ba2b0d6b7d0a77450f99c7
-
SHA1
c4834379978164e29416eb73140dabb7250a3ccc
-
SHA256
63f4c93f86d79cdc3d93a4273627b6dd4df1e9293049872f1f150468737ed9ad
-
SHA512
dcb13b9cf22795cdb2fc4b0851dc40a662354fa45a1b5e32a96163097dd6e111e869c7f99750c764cff4cf82b9db24056959d56c502679deb16c4bcd9f4d5ca6
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-