General
-
Target
1a34b297a22c11caeff4a48bdfe74197a904786b2fd821b4ddb98c709c768fcc
-
Size
372KB
-
Sample
220131-j5eb6agggp
-
MD5
f2811d49789f5c1b7e4dfa88d5ccfbf3
-
SHA1
825c863ebf433b3612df4814d139777471170b7e
-
SHA256
1a34b297a22c11caeff4a48bdfe74197a904786b2fd821b4ddb98c709c768fcc
-
SHA512
ad0df49d70e9d2840997d47072b31b5a532c43774ce7bf44d8bc50a03f6a10b110a14ef6c39f4b0caf6ce3a3398717890c1c6c012f75da1d907b61e2fcf38feb
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
1a34b297a22c11caeff4a48bdfe74197a904786b2fd821b4ddb98c709c768fcc
-
Size
372KB
-
MD5
f2811d49789f5c1b7e4dfa88d5ccfbf3
-
SHA1
825c863ebf433b3612df4814d139777471170b7e
-
SHA256
1a34b297a22c11caeff4a48bdfe74197a904786b2fd821b4ddb98c709c768fcc
-
SHA512
ad0df49d70e9d2840997d47072b31b5a532c43774ce7bf44d8bc50a03f6a10b110a14ef6c39f4b0caf6ce3a3398717890c1c6c012f75da1d907b61e2fcf38feb
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-