General
-
Target
3a724fa080005f1917e6ddd978e5fd4a75255f9ead7f653be7f1b6da3dd0a7a9
-
Size
580KB
-
Sample
230604-xxdbsadd22
-
MD5
f3a9d9ed539faa1735c7d70eeb5b1f0b
-
SHA1
61b758463f23248bafb6ae467e9be0f870e1d34f
-
SHA256
3a724fa080005f1917e6ddd978e5fd4a75255f9ead7f653be7f1b6da3dd0a7a9
-
SHA512
9bf04e0e1a7fccdfd643de0eb9e6a47b32c8900eaa19aba4b9119a1256c07895e9077f112b9520b97eac6ab7d7eb1aee9cd667b74d6316e85459a72dfb17d1fb
-
SSDEEP
12288:fMr9y90EhZHd5U9u0bjDcMCwJKvm+aE5u:yyVU9u4y0+aE5u
Static task
static1
Behavioral task
behavioral1
Sample
3a724fa080005f1917e6ddd978e5fd4a75255f9ead7f653be7f1b6da3dd0a7a9.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
3a724fa080005f1917e6ddd978e5fd4a75255f9ead7f653be7f1b6da3dd0a7a9
-
Size
580KB
-
MD5
f3a9d9ed539faa1735c7d70eeb5b1f0b
-
SHA1
61b758463f23248bafb6ae467e9be0f870e1d34f
-
SHA256
3a724fa080005f1917e6ddd978e5fd4a75255f9ead7f653be7f1b6da3dd0a7a9
-
SHA512
9bf04e0e1a7fccdfd643de0eb9e6a47b32c8900eaa19aba4b9119a1256c07895e9077f112b9520b97eac6ab7d7eb1aee9cd667b74d6316e85459a72dfb17d1fb
-
SSDEEP
12288:fMr9y90EhZHd5U9u0bjDcMCwJKvm+aE5u:yyVU9u4y0+aE5u
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-