General
-
Target
7327917255499d58b574bbcaa0830b51c5e2fdd8ebecd83498bc632b7d336471
-
Size
338KB
-
Sample
220210-anb12abhg5
-
MD5
3210524f05d52a18692bc5558efef7ad
-
SHA1
41b2254d2c40049774f00832d84d18141c730769
-
SHA256
7327917255499d58b574bbcaa0830b51c5e2fdd8ebecd83498bc632b7d336471
-
SHA512
9b2ca5d0c03829627f92d64dfdea480098110a3e770a5180db1dc1b8c6283d0fb3314311b8fa2eed2db3c7292da8b1724a5adf6bfcb328034b588695635f8211
Static task
static1
Behavioral task
behavioral1
Sample
7327917255499d58b574bbcaa0830b51c5e2fdd8ebecd83498bc632b7d336471.exe
Resource
win10-en-20211208
Malware Config
Extracted
redline
ruzkiKAKOYTO
185.215.113.29:20819
Targets
-
-
Target
7327917255499d58b574bbcaa0830b51c5e2fdd8ebecd83498bc632b7d336471
-
Size
338KB
-
MD5
3210524f05d52a18692bc5558efef7ad
-
SHA1
41b2254d2c40049774f00832d84d18141c730769
-
SHA256
7327917255499d58b574bbcaa0830b51c5e2fdd8ebecd83498bc632b7d336471
-
SHA512
9b2ca5d0c03829627f92d64dfdea480098110a3e770a5180db1dc1b8c6283d0fb3314311b8fa2eed2db3c7292da8b1724a5adf6bfcb328034b588695635f8211
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-