General
-
Target
94f9f27caff20bc8e84045b14c9cabea3e44e9d1c701d428a73d857721dd2b62
-
Size
419KB
-
Sample
220201-kggm2scbb7
-
MD5
19bdc05e959ef38356d9397e4c9a352b
-
SHA1
483630609a0f90a8b112d1303f991ebc3e39fdc9
-
SHA256
94f9f27caff20bc8e84045b14c9cabea3e44e9d1c701d428a73d857721dd2b62
-
SHA512
0e0e7e3b96723c3f63f3d1f19e0521a36f2ab3ef2bf9f39b02a12201d6c7a5c6869430292efe4ee6a3794a1c8e6bf1624f07729e66b80e0794fd2af57e8f42a1
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
94f9f27caff20bc8e84045b14c9cabea3e44e9d1c701d428a73d857721dd2b62
-
Size
419KB
-
MD5
19bdc05e959ef38356d9397e4c9a352b
-
SHA1
483630609a0f90a8b112d1303f991ebc3e39fdc9
-
SHA256
94f9f27caff20bc8e84045b14c9cabea3e44e9d1c701d428a73d857721dd2b62
-
SHA512
0e0e7e3b96723c3f63f3d1f19e0521a36f2ab3ef2bf9f39b02a12201d6c7a5c6869430292efe4ee6a3794a1c8e6bf1624f07729e66b80e0794fd2af57e8f42a1
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-