General
-
Target
0x00190000000124a1-116.dat
-
Size
145KB
-
Sample
230514-z68v6afh5s
-
MD5
9df0af44a26c4440b2e89f27d6d5764e
-
SHA1
42bb81ac968df24ba01664c7ea888061aee2f9e4
-
SHA256
5badd335b2bf987f896c9600371266fddb47e8542f399e9cfb9059937546d442
-
SHA512
1fafcee7b4c714f38ee7addca264843e7fb32777da29ae9ed4d642832324dab0c253c93d3ddd7f876a094f7233f72d8478880d2ffc38023b6aa4b7900ab3b4e8
-
SSDEEP
3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP
Behavioral task
behavioral1
Sample
0x00190000000124a1-116.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
larry
185.161.248.75:4132
-
auth_value
9039557bb7a08f5f2f60e2b71e1dee0e
Targets
-
-
Target
0x00190000000124a1-116.dat
-
Size
145KB
-
MD5
9df0af44a26c4440b2e89f27d6d5764e
-
SHA1
42bb81ac968df24ba01664c7ea888061aee2f9e4
-
SHA256
5badd335b2bf987f896c9600371266fddb47e8542f399e9cfb9059937546d442
-
SHA512
1fafcee7b4c714f38ee7addca264843e7fb32777da29ae9ed4d642832324dab0c253c93d3ddd7f876a094f7233f72d8478880d2ffc38023b6aa4b7900ab3b4e8
-
SSDEEP
3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-