General
-
Target
l9787658.exe
-
Size
168KB
-
Sample
230530-ethszsfb55
-
MD5
8f72d1fc64315d495095e59d591803a9
-
SHA1
f179d2aac404ad08dd98c8b186bd2005b446f46d
-
SHA256
c7fe29459b8202ef5da6158c7143177283e98368f7eb860871460604cb01ec4c
-
SHA512
05dfdb63c599151262efe64b5e2737a01817648100fd631e5dcd300dcd4b6451fe01f0339c8e44bbb0d406a2b277be6d1b501b3b97d1688fc419ede5d9b4a059
-
SSDEEP
3072:fceicOP8WFhEmuvtC+yqV4QgLVtHlxOYJo8e8hd:friZhETC+ynzHlxOYJo
Behavioral task
behavioral1
Sample
l9787658.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.127:19045
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
l9787658.exe
-
Size
168KB
-
MD5
8f72d1fc64315d495095e59d591803a9
-
SHA1
f179d2aac404ad08dd98c8b186bd2005b446f46d
-
SHA256
c7fe29459b8202ef5da6158c7143177283e98368f7eb860871460604cb01ec4c
-
SHA512
05dfdb63c599151262efe64b5e2737a01817648100fd631e5dcd300dcd4b6451fe01f0339c8e44bbb0d406a2b277be6d1b501b3b97d1688fc419ede5d9b4a059
-
SSDEEP
3072:fceicOP8WFhEmuvtC+yqV4QgLVtHlxOYJo8e8hd:friZhETC+ynzHlxOYJo
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-