General
-
Target
4941d490d48bf286ff22c26930dda3ea6517422f3725f12c88de086bf92b6aac
-
Size
339KB
-
Sample
220210-kas3hageg7
-
MD5
5419e864ecb4a24b1033e191b91b00c7
-
SHA1
c826b872f6ceed51abc664b25a208923865628ba
-
SHA256
4941d490d48bf286ff22c26930dda3ea6517422f3725f12c88de086bf92b6aac
-
SHA512
c093faac67e52f4ec6a3f03b32123cfedd8e7c86a77b90cd890723b8b1f296966350293cc5bfe9fe29702c523c0662fafbbe781b96cc8752d06101a7ddd5db37
Static task
static1
Behavioral task
behavioral1
Sample
4941d490d48bf286ff22c26930dda3ea6517422f3725f12c88de086bf92b6aac.exe
Resource
win10-en-20211208
Malware Config
Extracted
redline
ruzkiKAKOYTO
185.215.113.29:20819
Targets
-
-
Target
4941d490d48bf286ff22c26930dda3ea6517422f3725f12c88de086bf92b6aac
-
Size
339KB
-
MD5
5419e864ecb4a24b1033e191b91b00c7
-
SHA1
c826b872f6ceed51abc664b25a208923865628ba
-
SHA256
4941d490d48bf286ff22c26930dda3ea6517422f3725f12c88de086bf92b6aac
-
SHA512
c093faac67e52f4ec6a3f03b32123cfedd8e7c86a77b90cd890723b8b1f296966350293cc5bfe9fe29702c523c0662fafbbe781b96cc8752d06101a7ddd5db37
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-