General
-
Target
2d7f3a3e69b1ed84522c13912ef6eb13d3553bacc429d665b64f94f017d4d02c
-
Size
581KB
-
Sample
230604-3azjdsef4z
-
MD5
e45e3663dd69f561dfdd97358e7e71bc
-
SHA1
945dcd827fc0829203580f2c242c81b6386ca556
-
SHA256
2d7f3a3e69b1ed84522c13912ef6eb13d3553bacc429d665b64f94f017d4d02c
-
SHA512
6cec33698dc974a96e1417268941a51c7cc54ee821daf369164f4ac1096728ef823d503184227751bbed54d0a9ed2edcb5a62eeb42bf8d154919c4f011c83645
-
SSDEEP
12288:iMrSy90qKllt1uE+/SvB5cEr8W8J+S2p:Qyt6rkEOSvBlJK+J
Static task
static1
Behavioral task
behavioral1
Sample
2d7f3a3e69b1ed84522c13912ef6eb13d3553bacc429d665b64f94f017d4d02c.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
2d7f3a3e69b1ed84522c13912ef6eb13d3553bacc429d665b64f94f017d4d02c
-
Size
581KB
-
MD5
e45e3663dd69f561dfdd97358e7e71bc
-
SHA1
945dcd827fc0829203580f2c242c81b6386ca556
-
SHA256
2d7f3a3e69b1ed84522c13912ef6eb13d3553bacc429d665b64f94f017d4d02c
-
SHA512
6cec33698dc974a96e1417268941a51c7cc54ee821daf369164f4ac1096728ef823d503184227751bbed54d0a9ed2edcb5a62eeb42bf8d154919c4f011c83645
-
SSDEEP
12288:iMrSy90qKllt1uE+/SvB5cEr8W8J+S2p:Qyt6rkEOSvBlJK+J
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-