General
-
Target
ed2cb0b8dc0ee2225091fe8627ed66ac6d3561720892b0600cdb28963e975800
-
Size
399KB
-
Sample
220130-ygme7aacd3
-
MD5
1d4199d947b66c374c35ad22ad8f3618
-
SHA1
7ee4f6e9cea581b80d379643765f88891e39d847
-
SHA256
ed2cb0b8dc0ee2225091fe8627ed66ac6d3561720892b0600cdb28963e975800
-
SHA512
5583f145978a45fee12491a8dc78f53d8aaa721aa015d3eedf0ff8c5ee33bbdd4b868bb23c5c7fb6af2ff297668ad53e723a2b773b981ccc11da967318abb772
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
ed2cb0b8dc0ee2225091fe8627ed66ac6d3561720892b0600cdb28963e975800
-
Size
399KB
-
MD5
1d4199d947b66c374c35ad22ad8f3618
-
SHA1
7ee4f6e9cea581b80d379643765f88891e39d847
-
SHA256
ed2cb0b8dc0ee2225091fe8627ed66ac6d3561720892b0600cdb28963e975800
-
SHA512
5583f145978a45fee12491a8dc78f53d8aaa721aa015d3eedf0ff8c5ee33bbdd4b868bb23c5c7fb6af2ff297668ad53e723a2b773b981ccc11da967318abb772
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-