General
-
Target
3d73af7025337b11f810c0eb83e3efffe47cf3555d737ea43e04db299b62cf46
-
Size
399KB
-
Sample
220130-tzlt6afba4
-
MD5
f1bf0ee2b2579ce37c8655303d068514
-
SHA1
4e70dbe411060599b78360f2ac207c4591fe0cd6
-
SHA256
3d73af7025337b11f810c0eb83e3efffe47cf3555d737ea43e04db299b62cf46
-
SHA512
e333da397cb178ce9a1039b25fc17aba3dbed80b25a1c716e1518e7ec94566a65894d6dc49985f50233dad4d5874a9730a8502616ae3d0f2b9c4f412dbae1afa
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
3d73af7025337b11f810c0eb83e3efffe47cf3555d737ea43e04db299b62cf46
-
Size
399KB
-
MD5
f1bf0ee2b2579ce37c8655303d068514
-
SHA1
4e70dbe411060599b78360f2ac207c4591fe0cd6
-
SHA256
3d73af7025337b11f810c0eb83e3efffe47cf3555d737ea43e04db299b62cf46
-
SHA512
e333da397cb178ce9a1039b25fc17aba3dbed80b25a1c716e1518e7ec94566a65894d6dc49985f50233dad4d5874a9730a8502616ae3d0f2b9c4f412dbae1afa
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-