General
-
Target
28153a3179c28ed7fa930190a59aa653088a0768e7db3a7d2ed927d275dd9545
-
Size
581KB
-
Sample
230604-3l5jsaeb38
-
MD5
e70e8dd2f2a949f1a73438c0f498de1c
-
SHA1
40ce5995dd5cffd9d698a448d426552e97222f0a
-
SHA256
28153a3179c28ed7fa930190a59aa653088a0768e7db3a7d2ed927d275dd9545
-
SHA512
c25c2d67e6170e9ede05ba67d81a6c6bcc6b58f3015a577a09e35786373276adeaecc1958ea600614b2fc260bf052e022e723f1e1430b7695b5e9cecf492e6f5
-
SSDEEP
12288:RMrFy90LNRlNsFmw633onPfQGpMvr6Rt6f2VwerUzGd3JmMh3t:8ymDNF33onpMvr5uL448Mh3t
Static task
static1
Behavioral task
behavioral1
Sample
28153a3179c28ed7fa930190a59aa653088a0768e7db3a7d2ed927d275dd9545.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
28153a3179c28ed7fa930190a59aa653088a0768e7db3a7d2ed927d275dd9545
-
Size
581KB
-
MD5
e70e8dd2f2a949f1a73438c0f498de1c
-
SHA1
40ce5995dd5cffd9d698a448d426552e97222f0a
-
SHA256
28153a3179c28ed7fa930190a59aa653088a0768e7db3a7d2ed927d275dd9545
-
SHA512
c25c2d67e6170e9ede05ba67d81a6c6bcc6b58f3015a577a09e35786373276adeaecc1958ea600614b2fc260bf052e022e723f1e1430b7695b5e9cecf492e6f5
-
SSDEEP
12288:RMrFy90LNRlNsFmw633onPfQGpMvr6Rt6f2VwerUzGd3JmMh3t:8ymDNF33onpMvr5uL448Mh3t
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-