General
-
Target
server930.dat.exe
-
Size
145KB
-
Sample
230521-wdfgcsec61
-
MD5
c779f0e815c7c69acc021c75bb515b3f
-
SHA1
8d366e261c75b73714e9cbc3b3fcaf26c1820e7d
-
SHA256
691fb88d6b978c122c9cf015a7adfcd6cf0efa2a368cd0716c7241b8632247e3
-
SHA512
c3b434c1e7f78cdbc6dc02a2e758c61fc80936e6ff3057c927ab291dd0685b407a854007ba2adc516d699f93e63784236fd94b5aee05b5393696d6e14bf66ab9
-
SSDEEP
3072:2V+m5cNQmRSxWWAcP+DDXedh7Z58e8hk:2jwCUudh7z
Behavioral task
behavioral1
Sample
server930.dat.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
duper
77.91.68.253:19065
-
auth_value
57e17ebbdb18f4882b95fe05402ef1c8
Targets
-
-
Target
server930.dat.exe
-
Size
145KB
-
MD5
c779f0e815c7c69acc021c75bb515b3f
-
SHA1
8d366e261c75b73714e9cbc3b3fcaf26c1820e7d
-
SHA256
691fb88d6b978c122c9cf015a7adfcd6cf0efa2a368cd0716c7241b8632247e3
-
SHA512
c3b434c1e7f78cdbc6dc02a2e758c61fc80936e6ff3057c927ab291dd0685b407a854007ba2adc516d699f93e63784236fd94b5aee05b5393696d6e14bf66ab9
-
SSDEEP
3072:2V+m5cNQmRSxWWAcP+DDXedh7Z58e8hk:2jwCUudh7z
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-