General
-
Target
ae9d1b0b30c56559d72034b32706a2fa46518712dc056e93a71366f3e1a418bb
-
Size
386KB
-
Sample
220211-kfzr8seagn
-
MD5
360598965de17bfbe7617a00909a33fc
-
SHA1
f466593397d8731339a8398b5ea6c72f893ff3e1
-
SHA256
ae9d1b0b30c56559d72034b32706a2fa46518712dc056e93a71366f3e1a418bb
-
SHA512
938cf3a99e3e068a0e765ac2e04ecbd392618452db3838a89af9163fc8c181ec0777f6b26629b8653e9eb1366d4b60b90d8e20ed8898863febfe4bd85345afd2
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
-
auth_value
ee92d883673b7156fdd66cac5fc8d2d0
Targets
-
-
Target
ae9d1b0b30c56559d72034b32706a2fa46518712dc056e93a71366f3e1a418bb
-
Size
386KB
-
MD5
360598965de17bfbe7617a00909a33fc
-
SHA1
f466593397d8731339a8398b5ea6c72f893ff3e1
-
SHA256
ae9d1b0b30c56559d72034b32706a2fa46518712dc056e93a71366f3e1a418bb
-
SHA512
938cf3a99e3e068a0e765ac2e04ecbd392618452db3838a89af9163fc8c181ec0777f6b26629b8653e9eb1366d4b60b90d8e20ed8898863febfe4bd85345afd2
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-