General
-
Target
38b889b0e975990e748de8d7080a0dd1b741829564f8b733cf789c0a77de0ff9
-
Size
450KB
-
Sample
220211-vgsqeseedk
-
MD5
d8bd3be6a573a73d5641cc689cb3864c
-
SHA1
414cd1a7cd91f33a15c4682830eae96e143dbb34
-
SHA256
38b889b0e975990e748de8d7080a0dd1b741829564f8b733cf789c0a77de0ff9
-
SHA512
89270938ca70075c4b315a3ec6fe457112d98372a45a1a4df7fb2f3f11660704be21cff468b8c4a1fc442aa92075ea872b73e21cd234a36fd7e65df4be4dda5c
Static task
static1
Malware Config
Extracted
redline
noname
185.215.113.29:20819
-
auth_value
ee92d883673b7156fdd66cac5fc8d2d0
Targets
-
-
Target
38b889b0e975990e748de8d7080a0dd1b741829564f8b733cf789c0a77de0ff9
-
Size
450KB
-
MD5
d8bd3be6a573a73d5641cc689cb3864c
-
SHA1
414cd1a7cd91f33a15c4682830eae96e143dbb34
-
SHA256
38b889b0e975990e748de8d7080a0dd1b741829564f8b733cf789c0a77de0ff9
-
SHA512
89270938ca70075c4b315a3ec6fe457112d98372a45a1a4df7fb2f3f11660704be21cff468b8c4a1fc442aa92075ea872b73e21cd234a36fd7e65df4be4dda5c
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-