General
-
Target
2cfabe7695f8b1a2c79aa8783d6c6ebda60c7ac21b85ef9b77d8a0ca51bdfd30
-
Size
399KB
-
Sample
220130-xvl6xahgc2
-
MD5
585ee9c0b7ece557ab5c926c84d124d1
-
SHA1
2615126750ef9fa4a5a8fcb9951d580b525d65cf
-
SHA256
2cfabe7695f8b1a2c79aa8783d6c6ebda60c7ac21b85ef9b77d8a0ca51bdfd30
-
SHA512
c38bf2d4c78612d8f7d363395b49d4419e0c7dec7897aec919ae776e5aad651498e7d5045a361d651bc75a874d7a113fab1146a5b8b1ab74a8fb2305eb217c83
Static task
static1
Behavioral task
behavioral1
Sample
2cfabe7695f8b1a2c79aa8783d6c6ebda60c7ac21b85ef9b77d8a0ca51bdfd30.exe
Resource
win10-en-20211208
Malware Config
Extracted
redline
ruzkiKAKOYTO
185.215.113.29:20819
Targets
-
-
Target
2cfabe7695f8b1a2c79aa8783d6c6ebda60c7ac21b85ef9b77d8a0ca51bdfd30
-
Size
399KB
-
MD5
585ee9c0b7ece557ab5c926c84d124d1
-
SHA1
2615126750ef9fa4a5a8fcb9951d580b525d65cf
-
SHA256
2cfabe7695f8b1a2c79aa8783d6c6ebda60c7ac21b85ef9b77d8a0ca51bdfd30
-
SHA512
c38bf2d4c78612d8f7d363395b49d4419e0c7dec7897aec919ae776e5aad651498e7d5045a361d651bc75a874d7a113fab1146a5b8b1ab74a8fb2305eb217c83
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-