General
-
Target
5baec847baf53479b1891b98cf8534b91ccb18b52df5a185df3d2f1717823be9
-
Size
388KB
-
Sample
220123-tvn4qagbh6
-
MD5
b305d381c364a94f67d73e58d2113114
-
SHA1
86306af2acab3f8497a6ffaa3fe82eef374345ac
-
SHA256
5baec847baf53479b1891b98cf8534b91ccb18b52df5a185df3d2f1717823be9
-
SHA512
a17943629507a8a39979574870b762df08d0c9cdced688800fb3aa867d3936322f5d00db818e7d34900eac0547ca03d428b1361454db026868eb29ebcb8f8fb3
Static task
static1
Malware Config
Extracted
redline
NONAME
45.9.20.111:1355
Targets
-
-
Target
5baec847baf53479b1891b98cf8534b91ccb18b52df5a185df3d2f1717823be9
-
Size
388KB
-
MD5
b305d381c364a94f67d73e58d2113114
-
SHA1
86306af2acab3f8497a6ffaa3fe82eef374345ac
-
SHA256
5baec847baf53479b1891b98cf8534b91ccb18b52df5a185df3d2f1717823be9
-
SHA512
a17943629507a8a39979574870b762df08d0c9cdced688800fb3aa867d3936322f5d00db818e7d34900eac0547ca03d428b1361454db026868eb29ebcb8f8fb3
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-