General
-
Target
4d7f7cce9b0186b06c86cc87595a766287106a1c0022435012339966665569c6
-
Size
457KB
-
Sample
220129-cpgc9aaghl
-
MD5
f2bd9edf0bf9f97613e4b3008332411b
-
SHA1
94fae3680ad79d2821f084f6fecd0309c26e61fd
-
SHA256
4d7f7cce9b0186b06c86cc87595a766287106a1c0022435012339966665569c6
-
SHA512
8e6903836a7968b6ff03775ddd524121f7dd939edcbc5439963bdc417c5870809b42b93e94c04283ad72d3d51a0f25ba7733b612336c1f953d6ed575fae21aa4
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
4d7f7cce9b0186b06c86cc87595a766287106a1c0022435012339966665569c6
-
Size
457KB
-
MD5
f2bd9edf0bf9f97613e4b3008332411b
-
SHA1
94fae3680ad79d2821f084f6fecd0309c26e61fd
-
SHA256
4d7f7cce9b0186b06c86cc87595a766287106a1c0022435012339966665569c6
-
SHA512
8e6903836a7968b6ff03775ddd524121f7dd939edcbc5439963bdc417c5870809b42b93e94c04283ad72d3d51a0f25ba7733b612336c1f953d6ed575fae21aa4
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-