General
-
Target
13f8ed3f1de03a6137a41929cb761febe08d4e8ef4fdd1dcc3e5e9e362675f8d
-
Size
580KB
-
Sample
230604-2hxjbsea33
-
MD5
13591ee226fa280b46766a5f57ff4c49
-
SHA1
5ff906d28367eac623ec0392dd63d05caaac8d52
-
SHA256
13f8ed3f1de03a6137a41929cb761febe08d4e8ef4fdd1dcc3e5e9e362675f8d
-
SHA512
e6b8aa804bc1951f574e6bfc85c2490d9570a8011bc9d104e4d342b6534e89b1171542cee43ff3cc7e2beda7481e45996edd507272ad100865d2089a624c6110
-
SSDEEP
12288:mMr9y90x4/Izehp92BXO6ArWr+JahjlZ76Ml:zyd/Izk0Be6jaaJlZ76Ml
Static task
static1
Behavioral task
behavioral1
Sample
13f8ed3f1de03a6137a41929cb761febe08d4e8ef4fdd1dcc3e5e9e362675f8d.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
13f8ed3f1de03a6137a41929cb761febe08d4e8ef4fdd1dcc3e5e9e362675f8d
-
Size
580KB
-
MD5
13591ee226fa280b46766a5f57ff4c49
-
SHA1
5ff906d28367eac623ec0392dd63d05caaac8d52
-
SHA256
13f8ed3f1de03a6137a41929cb761febe08d4e8ef4fdd1dcc3e5e9e362675f8d
-
SHA512
e6b8aa804bc1951f574e6bfc85c2490d9570a8011bc9d104e4d342b6534e89b1171542cee43ff3cc7e2beda7481e45996edd507272ad100865d2089a624c6110
-
SSDEEP
12288:mMr9y90x4/Izehp92BXO6ArWr+JahjlZ76Ml:zyd/Izk0Be6jaaJlZ76Ml
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-