General
-
Target
e1ada95fd06785b65423ca19b460187844dac1118f4f44a9968bfd701530d625
-
Size
581KB
-
Sample
230604-yafztsea7s
-
MD5
c0c6db4cc30282a43029ae848d3bd058
-
SHA1
e9f8d680b5311801cf9159858973c8ae57075908
-
SHA256
e1ada95fd06785b65423ca19b460187844dac1118f4f44a9968bfd701530d625
-
SHA512
d3e6e7915bef6a2e9a2b92243d5fa58de3461c3d73331c65ef3916bd3b96e7c5597d276d6875193c3269a62538fc0d096e59ca61b81773da470e08faa60a9115
-
SSDEEP
12288:GMrry90aSJYSD0ie/Jk7TxkrDbjpkN50U6AuUwyjHq:tyJM0x/JwuTjp650U6VnyG
Static task
static1
Behavioral task
behavioral1
Sample
e1ada95fd06785b65423ca19b460187844dac1118f4f44a9968bfd701530d625.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
e1ada95fd06785b65423ca19b460187844dac1118f4f44a9968bfd701530d625
-
Size
581KB
-
MD5
c0c6db4cc30282a43029ae848d3bd058
-
SHA1
e9f8d680b5311801cf9159858973c8ae57075908
-
SHA256
e1ada95fd06785b65423ca19b460187844dac1118f4f44a9968bfd701530d625
-
SHA512
d3e6e7915bef6a2e9a2b92243d5fa58de3461c3d73331c65ef3916bd3b96e7c5597d276d6875193c3269a62538fc0d096e59ca61b81773da470e08faa60a9115
-
SSDEEP
12288:GMrry90aSJYSD0ie/Jk7TxkrDbjpkN50U6AuUwyjHq:tyJM0x/JwuTjp650U6VnyG
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-