General
-
Target
d426e49d0f645b2661cccfaa22ef58258962fd78649472c2b5170a1e7e373345
-
Size
370KB
-
Sample
220123-hmsldsfbh9
-
MD5
c1538d33c17d1d8445b93c5fb5802d89
-
SHA1
8e056d858d47469a3bee76ee95e8a3035f2488e7
-
SHA256
d426e49d0f645b2661cccfaa22ef58258962fd78649472c2b5170a1e7e373345
-
SHA512
9b9e951bacfd555bd9358bd0859f75b4fbcd9b7434b74cf84fe2b307b992361718ccd802296b327ad7169903a681698245c3aac6958e3153452c968729d944e0
Static task
static1
Malware Config
Extracted
redline
NONAME
45.9.20.111:1355
Targets
-
-
Target
d426e49d0f645b2661cccfaa22ef58258962fd78649472c2b5170a1e7e373345
-
Size
370KB
-
MD5
c1538d33c17d1d8445b93c5fb5802d89
-
SHA1
8e056d858d47469a3bee76ee95e8a3035f2488e7
-
SHA256
d426e49d0f645b2661cccfaa22ef58258962fd78649472c2b5170a1e7e373345
-
SHA512
9b9e951bacfd555bd9358bd0859f75b4fbcd9b7434b74cf84fe2b307b992361718ccd802296b327ad7169903a681698245c3aac6958e3153452c968729d944e0
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-