General
-
Target
19eb0614a4685452e76bc27754deac90a12a51f18597838b36869fd7ab806652
-
Size
580KB
-
Sample
230604-12razsee4z
-
MD5
145e222dfac482f12f4a3a2cf0bf0037
-
SHA1
fd640d0793b2cec29d049fc79be3ee7242077f9a
-
SHA256
19eb0614a4685452e76bc27754deac90a12a51f18597838b36869fd7ab806652
-
SHA512
542326064b1a45406fa9107c6afaa311f96d6ccf2c9a1ad8f89c3904434a16af3200a6cc38c4ad139c98d6380f4b4013c25e3377372ced96ea8830621d08876f
-
SSDEEP
12288:LMrSy90lYLiFimTmKpQScvOZEkCv7WrCgXrau6MCw1NS:VyRi8CCfk1CgTuw1k
Static task
static1
Behavioral task
behavioral1
Sample
19eb0614a4685452e76bc27754deac90a12a51f18597838b36869fd7ab806652.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
19eb0614a4685452e76bc27754deac90a12a51f18597838b36869fd7ab806652
-
Size
580KB
-
MD5
145e222dfac482f12f4a3a2cf0bf0037
-
SHA1
fd640d0793b2cec29d049fc79be3ee7242077f9a
-
SHA256
19eb0614a4685452e76bc27754deac90a12a51f18597838b36869fd7ab806652
-
SHA512
542326064b1a45406fa9107c6afaa311f96d6ccf2c9a1ad8f89c3904434a16af3200a6cc38c4ad139c98d6380f4b4013c25e3377372ced96ea8830621d08876f
-
SSDEEP
12288:LMrSy90lYLiFimTmKpQScvOZEkCv7WrCgXrau6MCw1NS:VyRi8CCfk1CgTuw1k
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-