General
-
Target
0x000700000001aed2-180.dat
-
Size
145KB
-
Sample
230516-kn6kraae6z
-
MD5
6b7388e509b81e7006230d889fbabaaa
-
SHA1
dafdae28dd116f46ed59a26bdfc4ffda90919c60
-
SHA256
847c8240ae6e3f9ca11369aa117a9439f5fe8e4eecf31ca4ee08ff187c2b6668
-
SHA512
459518de48c12deb3057a41ba38a7d3dd43754c8dfff1cb007fe550103db2ec6d6d40b31397c863d6e0bab4ab7d7b8e953f39d95518366898794246d35b6f2f6
-
SSDEEP
3072:MV+m5c9QmRSRN8YNkMaJScaqhKZV8e8h4:MjA9BMrqhKf
Behavioral task
behavioral1
Sample
0x000700000001aed2-180.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
dama
185.161.248.25:4132
-
auth_value
d8b2637e0546aea3944c251022b63e77
Targets
-
-
Target
0x000700000001aed2-180.dat
-
Size
145KB
-
MD5
6b7388e509b81e7006230d889fbabaaa
-
SHA1
dafdae28dd116f46ed59a26bdfc4ffda90919c60
-
SHA256
847c8240ae6e3f9ca11369aa117a9439f5fe8e4eecf31ca4ee08ff187c2b6668
-
SHA512
459518de48c12deb3057a41ba38a7d3dd43754c8dfff1cb007fe550103db2ec6d6d40b31397c863d6e0bab4ab7d7b8e953f39d95518366898794246d35b6f2f6
-
SSDEEP
3072:MV+m5c9QmRSRN8YNkMaJScaqhKZV8e8h4:MjA9BMrqhKf
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-