General
-
Target
f5f5acbda3fa1450a0eb34b70282a1a064970d480fa9552015835288abc0b1af
-
Size
372KB
-
Sample
220131-l2pptsheh5
-
MD5
704fc0ac7de007229efc19687da92f93
-
SHA1
5f52e9bffda21d57092113bd833b5458a7b40d0d
-
SHA256
f5f5acbda3fa1450a0eb34b70282a1a064970d480fa9552015835288abc0b1af
-
SHA512
e370944165887e60266df4b5ff182fd1c5f52e1880568e4fd0ed67864fb1ea1a2d2c74111067cc1e8d8da47408331c14978df846cf16ce612752d55c34f6e944
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
f5f5acbda3fa1450a0eb34b70282a1a064970d480fa9552015835288abc0b1af
-
Size
372KB
-
MD5
704fc0ac7de007229efc19687da92f93
-
SHA1
5f52e9bffda21d57092113bd833b5458a7b40d0d
-
SHA256
f5f5acbda3fa1450a0eb34b70282a1a064970d480fa9552015835288abc0b1af
-
SHA512
e370944165887e60266df4b5ff182fd1c5f52e1880568e4fd0ed67864fb1ea1a2d2c74111067cc1e8d8da47408331c14978df846cf16ce612752d55c34f6e944
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-