General
-
Target
50ffe8d42d2bf3a16023696047088018.exe
-
Size
443KB
-
Sample
220126-lvhb6sbedm
-
MD5
50ffe8d42d2bf3a16023696047088018
-
SHA1
91c9b173a99b50502fc6156a4a424f393f06f9d1
-
SHA256
a622f35e773529d6dc4e760e4b6cf6bf8274c22cf98adf97109c6e1ca6e2deaa
-
SHA512
b8fc0d32bfe934181dee49fc49c982aac075007ec63587372fd1c2f26aa29553dc4b1ad64e279ab150d72b7d3bb3cb4138fc3354b1a58027beb2e1b4792ef23c
Static task
static1
Behavioral task
behavioral1
Sample
50ffe8d42d2bf3a16023696047088018.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
50ffe8d42d2bf3a16023696047088018.exe
Resource
win10-en-20211208
Malware Config
Extracted
redline
ruzkiKAKOYTO
185.215.113.29:20819
Targets
-
-
Target
50ffe8d42d2bf3a16023696047088018.exe
-
Size
443KB
-
MD5
50ffe8d42d2bf3a16023696047088018
-
SHA1
91c9b173a99b50502fc6156a4a424f393f06f9d1
-
SHA256
a622f35e773529d6dc4e760e4b6cf6bf8274c22cf98adf97109c6e1ca6e2deaa
-
SHA512
b8fc0d32bfe934181dee49fc49c982aac075007ec63587372fd1c2f26aa29553dc4b1ad64e279ab150d72b7d3bb3cb4138fc3354b1a58027beb2e1b4792ef23c
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-