General
-
Target
277e1d3917634de8e63a9576f4c35ab6766dcf4631cf2eebaa4636a18280b99b
-
Size
341KB
-
Sample
220210-m47h4agge5
-
MD5
421d6a09dad461cb4e513f4ba2e51c65
-
SHA1
02edd0911f17c82f21c206518ba213cc69c01502
-
SHA256
277e1d3917634de8e63a9576f4c35ab6766dcf4631cf2eebaa4636a18280b99b
-
SHA512
ee5f8a63c6b38f0809f2b5ad9a2eabb21cd9aa9edada42d0b7cbcbdb8623565a37c7652903ea98576680d63452d00c488829b10bad97fe961273b3513d981104
Static task
static1
Behavioral task
behavioral1
Sample
277e1d3917634de8e63a9576f4c35ab6766dcf4631cf2eebaa4636a18280b99b.exe
Resource
win10-en-20211208
Malware Config
Extracted
redline
ruzkiKAKOYTO
185.215.113.29:20819
Targets
-
-
Target
277e1d3917634de8e63a9576f4c35ab6766dcf4631cf2eebaa4636a18280b99b
-
Size
341KB
-
MD5
421d6a09dad461cb4e513f4ba2e51c65
-
SHA1
02edd0911f17c82f21c206518ba213cc69c01502
-
SHA256
277e1d3917634de8e63a9576f4c35ab6766dcf4631cf2eebaa4636a18280b99b
-
SHA512
ee5f8a63c6b38f0809f2b5ad9a2eabb21cd9aa9edada42d0b7cbcbdb8623565a37c7652903ea98576680d63452d00c488829b10bad97fe961273b3513d981104
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-