General
-
Target
0x0006000000014232-117.dat
-
Size
145KB
-
Sample
230515-kaqblsfd78
-
MD5
44de146a09ecfabd3d3a2e86f1693f0e
-
SHA1
61f16b72b1d0c9ff83248af72b7189e269f81e26
-
SHA256
2de4fc0c2c35a091aa10d0a26d711cf8b6a1d95325ea0d11fb1064d6c89aaf34
-
SHA512
f9b721c2999eb2ee3f33b807a0bf895a1aecbaa2988683fdd5057e5848bc866ca322e7068d4576cbb9f4510d8cffcdd2916b7e0d783738e184a5d4dcc5aa1e2a
-
SSDEEP
3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP
Behavioral task
behavioral1
Sample
0x0006000000014232-117.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
larry
185.161.248.75:4132
-
auth_value
9039557bb7a08f5f2f60e2b71e1dee0e
Targets
-
-
Target
0x0006000000014232-117.dat
-
Size
145KB
-
MD5
44de146a09ecfabd3d3a2e86f1693f0e
-
SHA1
61f16b72b1d0c9ff83248af72b7189e269f81e26
-
SHA256
2de4fc0c2c35a091aa10d0a26d711cf8b6a1d95325ea0d11fb1064d6c89aaf34
-
SHA512
f9b721c2999eb2ee3f33b807a0bf895a1aecbaa2988683fdd5057e5848bc866ca322e7068d4576cbb9f4510d8cffcdd2916b7e0d783738e184a5d4dcc5aa1e2a
-
SSDEEP
3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-