General
-
Target
9024e09f0779a37ca9c2b8555d3b5c727a83090eddfcc6488bc35de8f7f0b757
-
Size
420KB
-
Sample
220201-t9jsjshehq
-
MD5
96015f357cfb23cb029333321ff6cf4a
-
SHA1
a883d617b894f050c69ea2a33c26781f0d3eb072
-
SHA256
9024e09f0779a37ca9c2b8555d3b5c727a83090eddfcc6488bc35de8f7f0b757
-
SHA512
7dc252381b9097aec5e64802c5cde7499ced181c490b8460c224f6f5a431deeb63c646c82897f2cd2a8dfac86117f6f6bfdc80f553dddc665ea4053260c44011
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
Targets
-
-
Target
9024e09f0779a37ca9c2b8555d3b5c727a83090eddfcc6488bc35de8f7f0b757
-
Size
420KB
-
MD5
96015f357cfb23cb029333321ff6cf4a
-
SHA1
a883d617b894f050c69ea2a33c26781f0d3eb072
-
SHA256
9024e09f0779a37ca9c2b8555d3b5c727a83090eddfcc6488bc35de8f7f0b757
-
SHA512
7dc252381b9097aec5e64802c5cde7499ced181c490b8460c224f6f5a431deeb63c646c82897f2cd2a8dfac86117f6f6bfdc80f553dddc665ea4053260c44011
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-