General
-
Target
0x000600000001af04-180.dat
-
Size
145KB
-
Sample
230519-myxrpsdd42
-
MD5
c38d5e7db1667f8d55fbbc2ecb41f76a
-
SHA1
6386841710e2c3f4020c30b89bfb2eedc2015d95
-
SHA256
7e53171ba52db52945e1aaf352b2fee6aa126c583869d3cfd3d05d6dcce8ac0b
-
SHA512
3397327bc5e70db7cc70165053c3bda2be919839d883bd50e9547e5efee762b68846c97e75c1ad6d990c5c76454b8456e205f29821fe4608a1ea7d8106b3a955
-
SSDEEP
3072:PV+m5chQmRSZQ1avem1eJwfUuMyNiOhjZR8e8hX:PjENURTIOhj7
Behavioral task
behavioral1
Sample
0x000600000001af04-180.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
muser
77.91.68.253:19065
-
auth_value
ab307a8e027ba1296455e3d548f168a3
Targets
-
-
Target
0x000600000001af04-180.dat
-
Size
145KB
-
MD5
c38d5e7db1667f8d55fbbc2ecb41f76a
-
SHA1
6386841710e2c3f4020c30b89bfb2eedc2015d95
-
SHA256
7e53171ba52db52945e1aaf352b2fee6aa126c583869d3cfd3d05d6dcce8ac0b
-
SHA512
3397327bc5e70db7cc70165053c3bda2be919839d883bd50e9547e5efee762b68846c97e75c1ad6d990c5c76454b8456e205f29821fe4608a1ea7d8106b3a955
-
SSDEEP
3072:PV+m5chQmRSZQ1avem1eJwfUuMyNiOhjZR8e8hX:PjENURTIOhj7
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-