General
-
Target
0x00070000000139e9-117.dat
-
Size
145KB
-
Sample
230515-dvd1ragh6z
-
MD5
8402228ac97052c7406c7efdaf3559bd
-
SHA1
97ac14e064bc057af6bdd92542554bb52719cf28
-
SHA256
efa87a05dad51ecedb97db32bb05f0ff7088122e0271e21cb6ecfe9ebb5adae2
-
SHA512
fc966e845f1303010656b1b61819401d06975934b574e814b144bfb2713bb3b1762791446b1f6920b8c1f973b458a2a6c0b86feb7f67204de8e38b700f16f711
-
SSDEEP
3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP
Behavioral task
behavioral1
Sample
0x00070000000139e9-117.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
larry
185.161.248.75:4132
-
auth_value
9039557bb7a08f5f2f60e2b71e1dee0e
Targets
-
-
Target
0x00070000000139e9-117.dat
-
Size
145KB
-
MD5
8402228ac97052c7406c7efdaf3559bd
-
SHA1
97ac14e064bc057af6bdd92542554bb52719cf28
-
SHA256
efa87a05dad51ecedb97db32bb05f0ff7088122e0271e21cb6ecfe9ebb5adae2
-
SHA512
fc966e845f1303010656b1b61819401d06975934b574e814b144bfb2713bb3b1762791446b1f6920b8c1f973b458a2a6c0b86feb7f67204de8e38b700f16f711
-
SSDEEP
3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-