General
-
Target
0x0007000000014232-78.dat
-
Size
145KB
-
Sample
230525-xgqbeabg68
-
MD5
63bfdd738fe52bb9d803d60df884ec25
-
SHA1
9fd801bc486e8c9dd7ce056b83f64113087ab9cc
-
SHA256
d49e449839d29ece29272b8e2b0ec0d0eac9d7f951b94471398d51d9c6e5fa02
-
SHA512
47c782da436122d7cdcda4207357bc14f48c5a8ebd4c25ebe344be6ed0b44f9edf56bd91fabbf399a67b7e3d365adb5821de60edce17556e35336c16ccfa4fdd
-
SSDEEP
3072:TV+m5clQmRSRNrncqvQ8nVBNDBhwZq8e8hJ:Tjor211BhwA
Behavioral task
behavioral1
Sample
0x0007000000014232-78.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
dina
83.97.73.122:19062
-
auth_value
4f77073adc624269de1bff760b9bc471
Targets
-
-
Target
0x0007000000014232-78.dat
-
Size
145KB
-
MD5
63bfdd738fe52bb9d803d60df884ec25
-
SHA1
9fd801bc486e8c9dd7ce056b83f64113087ab9cc
-
SHA256
d49e449839d29ece29272b8e2b0ec0d0eac9d7f951b94471398d51d9c6e5fa02
-
SHA512
47c782da436122d7cdcda4207357bc14f48c5a8ebd4c25ebe344be6ed0b44f9edf56bd91fabbf399a67b7e3d365adb5821de60edce17556e35336c16ccfa4fdd
-
SSDEEP
3072:TV+m5clQmRSRNrncqvQ8nVBNDBhwZq8e8hJ:Tjor211BhwA
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-