General
-
Target
1e674e8f362386ca1be61af5cb5e9cd8b043b98ba33f7ef1377898cbab2f70b5
-
Size
580KB
-
Sample
230604-2bt5maee7w
-
MD5
da9117e3e0d477494774b16ee143a653
-
SHA1
f65f531098d08fec2723028713b3fc4fa3f82736
-
SHA256
1e674e8f362386ca1be61af5cb5e9cd8b043b98ba33f7ef1377898cbab2f70b5
-
SHA512
d97a37b1b909fd7a68503cf036a570ac2f0d453e70967b7fe357f41f869de309c52f6848832454da9abbf9452070f6fddf0e22b64700657d7fa6c7f0c5d1e58a
-
SSDEEP
12288:dMrZy90ouSjCvtVdX76AbtJhG7rI1WjKe3pZczwb06LUwo8XbjYe:IyQjLbtJWP3ptQ6LnoUjYe
Static task
static1
Behavioral task
behavioral1
Sample
1e674e8f362386ca1be61af5cb5e9cd8b043b98ba33f7ef1377898cbab2f70b5.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
1e674e8f362386ca1be61af5cb5e9cd8b043b98ba33f7ef1377898cbab2f70b5
-
Size
580KB
-
MD5
da9117e3e0d477494774b16ee143a653
-
SHA1
f65f531098d08fec2723028713b3fc4fa3f82736
-
SHA256
1e674e8f362386ca1be61af5cb5e9cd8b043b98ba33f7ef1377898cbab2f70b5
-
SHA512
d97a37b1b909fd7a68503cf036a570ac2f0d453e70967b7fe357f41f869de309c52f6848832454da9abbf9452070f6fddf0e22b64700657d7fa6c7f0c5d1e58a
-
SSDEEP
12288:dMrZy90ouSjCvtVdX76AbtJhG7rI1WjKe3pZczwb06LUwo8XbjYe:IyQjLbtJWP3ptQ6LnoUjYe
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-