General
-
Target
ed2389859ffd607cd989ff6bb2e570f36ff4c58b524e8ee8c88e7f869fb76a83
-
Size
451KB
-
Sample
220211-mv2w9aebeq
-
MD5
22ac4769a18701a262d084c456d41938
-
SHA1
3c490e28a6399c74530e5288260f7adbec18f7be
-
SHA256
ed2389859ffd607cd989ff6bb2e570f36ff4c58b524e8ee8c88e7f869fb76a83
-
SHA512
647e9f6ca0e5fd44baebd2f17ad1f550694b177a7dae9f71990fd72039da605e42ed4bdb759faee831b6b1371fa551fa510cf14345f3af0860dd563bbe7ea478
Static task
static1
Behavioral task
behavioral1
Sample
ed2389859ffd607cd989ff6bb2e570f36ff4c58b524e8ee8c88e7f869fb76a83.exe
Resource
win10-en-20211208
Malware Config
Extracted
redline
ruzkiKAKOYTO
185.215.113.29:20819
-
auth_value
44e87155dd7a4d1957a956ed040ff3fd
Targets
-
-
Target
ed2389859ffd607cd989ff6bb2e570f36ff4c58b524e8ee8c88e7f869fb76a83
-
Size
451KB
-
MD5
22ac4769a18701a262d084c456d41938
-
SHA1
3c490e28a6399c74530e5288260f7adbec18f7be
-
SHA256
ed2389859ffd607cd989ff6bb2e570f36ff4c58b524e8ee8c88e7f869fb76a83
-
SHA512
647e9f6ca0e5fd44baebd2f17ad1f550694b177a7dae9f71990fd72039da605e42ed4bdb759faee831b6b1371fa551fa510cf14345f3af0860dd563bbe7ea478
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-