General
-
Target
f896b2f4823efc05bdf406c2f046ee01ad17062753d17cd64878e25f837d311f
-
Size
380KB
-
Sample
220127-g7tthsgggr
-
MD5
2caf83d3f3f1aa7f47e7e8d26b029901
-
SHA1
9618cc6426b213f08af077131564fc58af687420
-
SHA256
f896b2f4823efc05bdf406c2f046ee01ad17062753d17cd64878e25f837d311f
-
SHA512
770cc102c83848c965fb781eb117f6d28bf54cc5c6697e399bf1318ce204887b0dedb2d097c036897ac59d7b856bcbe2a3d9089feec583bbb6708477014fc69f
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
f896b2f4823efc05bdf406c2f046ee01ad17062753d17cd64878e25f837d311f
-
Size
380KB
-
MD5
2caf83d3f3f1aa7f47e7e8d26b029901
-
SHA1
9618cc6426b213f08af077131564fc58af687420
-
SHA256
f896b2f4823efc05bdf406c2f046ee01ad17062753d17cd64878e25f837d311f
-
SHA512
770cc102c83848c965fb781eb117f6d28bf54cc5c6697e399bf1318ce204887b0dedb2d097c036897ac59d7b856bcbe2a3d9089feec583bbb6708477014fc69f
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-