General
-
Target
1246f95b30baf6ce118d9604a682acc8caf2347eac42d332bbe12c4c5105a3c3
-
Size
467KB
-
Sample
220128-fqw2wagda4
-
MD5
191d7fe08d419ba807b422ebd0330537
-
SHA1
4782017b7603426709f8685d588a23dd08c140f6
-
SHA256
1246f95b30baf6ce118d9604a682acc8caf2347eac42d332bbe12c4c5105a3c3
-
SHA512
866f596d40da01e38949b8d852b840d0be3b5bb322080b6c358f6af50d3f2e2d87b145b7f233620272d4b4a3687d35a173be93009a8c6a4defe5a84716bbbe4a
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
1246f95b30baf6ce118d9604a682acc8caf2347eac42d332bbe12c4c5105a3c3
-
Size
467KB
-
MD5
191d7fe08d419ba807b422ebd0330537
-
SHA1
4782017b7603426709f8685d588a23dd08c140f6
-
SHA256
1246f95b30baf6ce118d9604a682acc8caf2347eac42d332bbe12c4c5105a3c3
-
SHA512
866f596d40da01e38949b8d852b840d0be3b5bb322080b6c358f6af50d3f2e2d87b145b7f233620272d4b4a3687d35a173be93009a8c6a4defe5a84716bbbe4a
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-