General
-
Target
6b97e923ce47873734265aef68a7a38f0e54493e5e3ef9fc18ce8327b88ca55c
-
Size
329KB
-
Sample
220127-313zhacffm
-
MD5
31ec7cf1960eab3f602ca31db2822978
-
SHA1
6453c8e5a1dca58a677414154201052395ff998a
-
SHA256
6b97e923ce47873734265aef68a7a38f0e54493e5e3ef9fc18ce8327b88ca55c
-
SHA512
8bbb9c4099ba15c286d8c6808cc2599e0b4bc6753afe20c77f079f2d018ca53c63fec519ef6d6434bba9dfcbcee4ff784144ae156749f06edf4858cf38ee94e0
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
6b97e923ce47873734265aef68a7a38f0e54493e5e3ef9fc18ce8327b88ca55c
-
Size
329KB
-
MD5
31ec7cf1960eab3f602ca31db2822978
-
SHA1
6453c8e5a1dca58a677414154201052395ff998a
-
SHA256
6b97e923ce47873734265aef68a7a38f0e54493e5e3ef9fc18ce8327b88ca55c
-
SHA512
8bbb9c4099ba15c286d8c6808cc2599e0b4bc6753afe20c77f079f2d018ca53c63fec519ef6d6434bba9dfcbcee4ff784144ae156749f06edf4858cf38ee94e0
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-