General
-
Target
60c973bcc33165c99c7f6e9ef06c5a62b603f9bf3e28c2ac36e2bf57976cdc0f
-
Size
444KB
-
Sample
220126-yxwc2ahgfr
-
MD5
8446ea5def3aad6e8261ab26c86b423b
-
SHA1
c58da2941ae91f98bc8d5664c0371d4049a51ca5
-
SHA256
60c973bcc33165c99c7f6e9ef06c5a62b603f9bf3e28c2ac36e2bf57976cdc0f
-
SHA512
039d1278f89d105fce5a8067734f9d7de2c882784f2fe0fcfda61d32a93172e4ca7c7108c0dcdc0e814b26de28bb3397c989df5a8258e6829c05561aac9f4efc
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
60c973bcc33165c99c7f6e9ef06c5a62b603f9bf3e28c2ac36e2bf57976cdc0f
-
Size
444KB
-
MD5
8446ea5def3aad6e8261ab26c86b423b
-
SHA1
c58da2941ae91f98bc8d5664c0371d4049a51ca5
-
SHA256
60c973bcc33165c99c7f6e9ef06c5a62b603f9bf3e28c2ac36e2bf57976cdc0f
-
SHA512
039d1278f89d105fce5a8067734f9d7de2c882784f2fe0fcfda61d32a93172e4ca7c7108c0dcdc0e814b26de28bb3397c989df5a8258e6829c05561aac9f4efc
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-