General
-
Target
99abf419bda61bb8e3f840acfa39d7a8db76bb561b3c269e71eaa2cf5759a14d
-
Size
327KB
-
Sample
220211-b67q4ahee9
-
MD5
9346b7f4f1c870474f9a226effb02114
-
SHA1
acaaaaedbdc3621615b3cfa0c3537b2fdc98cf78
-
SHA256
99abf419bda61bb8e3f840acfa39d7a8db76bb561b3c269e71eaa2cf5759a14d
-
SHA512
47ef54c6e0251b6548a70ad907fcf7fd696a5a0122dce7e5faa55e8396820e24d8474ef72434809509e81ec0982b711d69fa030be5586ec13a9d326a8df19ba4
Static task
static1
Behavioral task
behavioral1
Sample
99abf419bda61bb8e3f840acfa39d7a8db76bb561b3c269e71eaa2cf5759a14d.exe
Resource
win10-en-20211208
Malware Config
Extracted
redline
ruzkiKAKOYTO
185.215.113.29:20819
-
auth_value
44e87155dd7a4d1957a956ed040ff3fd
Targets
-
-
Target
99abf419bda61bb8e3f840acfa39d7a8db76bb561b3c269e71eaa2cf5759a14d
-
Size
327KB
-
MD5
9346b7f4f1c870474f9a226effb02114
-
SHA1
acaaaaedbdc3621615b3cfa0c3537b2fdc98cf78
-
SHA256
99abf419bda61bb8e3f840acfa39d7a8db76bb561b3c269e71eaa2cf5759a14d
-
SHA512
47ef54c6e0251b6548a70ad907fcf7fd696a5a0122dce7e5faa55e8396820e24d8474ef72434809509e81ec0982b711d69fa030be5586ec13a9d326a8df19ba4
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-