General
-
Target
ce7e909a08fc1edf7d3776c6b7d98627528e879baf516e59b16daa3d24ed5d13
-
Size
417KB
-
Sample
220201-qnrz9aehcl
-
MD5
8869b58cb476f4dd73c57780d681b66c
-
SHA1
f3e69dc5e1421e93aec701b4a2d5aee64c3ebdba
-
SHA256
ce7e909a08fc1edf7d3776c6b7d98627528e879baf516e59b16daa3d24ed5d13
-
SHA512
9f7128e276dc652112922db208647423bd2533b83567feb313df6da3ea1e9d23abc693f8238fffbd958deee6fc7aa9b18e075ee8fbd19fcac4029067d01d2c20
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
ce7e909a08fc1edf7d3776c6b7d98627528e879baf516e59b16daa3d24ed5d13
-
Size
417KB
-
MD5
8869b58cb476f4dd73c57780d681b66c
-
SHA1
f3e69dc5e1421e93aec701b4a2d5aee64c3ebdba
-
SHA256
ce7e909a08fc1edf7d3776c6b7d98627528e879baf516e59b16daa3d24ed5d13
-
SHA512
9f7128e276dc652112922db208647423bd2533b83567feb313df6da3ea1e9d23abc693f8238fffbd958deee6fc7aa9b18e075ee8fbd19fcac4029067d01d2c20
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-