General
-
Target
8cfaad7f4f83f6c62f36dbddeb4ce91e.exe
-
Size
443KB
-
Sample
220126-pff3cacfbm
-
MD5
8cfaad7f4f83f6c62f36dbddeb4ce91e
-
SHA1
bfd2a347745a65530ee737d0824d1f0907508f5d
-
SHA256
9331a8a30aaf5888027bb5540ee57118f23bb2d133de823385cae124491d31d7
-
SHA512
8d89ce04b974692bf697956e3d3b9869622dc7e988b6da917d3896c7cd3ed93ecc992835f4fcc09cd354f2d7ddaaf55f3941d1320185717fa6b36da9f4943a8d
Static task
static1
Behavioral task
behavioral1
Sample
8cfaad7f4f83f6c62f36dbddeb4ce91e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
8cfaad7f4f83f6c62f36dbddeb4ce91e.exe
Resource
win10-en-20211208
Malware Config
Extracted
redline
ruzkiKAKOYTO
185.215.113.29:20819
Targets
-
-
Target
8cfaad7f4f83f6c62f36dbddeb4ce91e.exe
-
Size
443KB
-
MD5
8cfaad7f4f83f6c62f36dbddeb4ce91e
-
SHA1
bfd2a347745a65530ee737d0824d1f0907508f5d
-
SHA256
9331a8a30aaf5888027bb5540ee57118f23bb2d133de823385cae124491d31d7
-
SHA512
8d89ce04b974692bf697956e3d3b9869622dc7e988b6da917d3896c7cd3ed93ecc992835f4fcc09cd354f2d7ddaaf55f3941d1320185717fa6b36da9f4943a8d
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-