General
-
Target
0x000600000001aecd-146.dat
-
Size
145KB
-
Sample
230526-mvyvlafe9s
-
MD5
2d406e63582072640e5463b1675c9ce1
-
SHA1
a166cacffe48a4e2040ef440d128f5f7638eb03d
-
SHA256
47f084d61e29c5928d3df746d6d5c9f619813644a3660abb2f3db6d9a3213c9a
-
SHA512
7024e5acf529cb6dd16f5337e94a63a5a046d8ad71bda88b4f9dfc0f481cf5cfd71fce55e778aa0182c21002d84bb72762d3384c49dbb9d78bd78d5a4021b13a
-
SSDEEP
3072:yV+m5crQmRSR38/OxTH25OjNkphoZR8e8h5:yjCZMgekphoL
Behavioral task
behavioral1
Sample
0x000600000001aecd-146.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
disa
83.97.73.122:19062
-
auth_value
93f8c4ca7000e3381dd4b6b86434de05
Targets
-
-
Target
0x000600000001aecd-146.dat
-
Size
145KB
-
MD5
2d406e63582072640e5463b1675c9ce1
-
SHA1
a166cacffe48a4e2040ef440d128f5f7638eb03d
-
SHA256
47f084d61e29c5928d3df746d6d5c9f619813644a3660abb2f3db6d9a3213c9a
-
SHA512
7024e5acf529cb6dd16f5337e94a63a5a046d8ad71bda88b4f9dfc0f481cf5cfd71fce55e778aa0182c21002d84bb72762d3384c49dbb9d78bd78d5a4021b13a
-
SSDEEP
3072:yV+m5crQmRSR38/OxTH25OjNkphoZR8e8h5:yjCZMgekphoL
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-