General
-
Target
6830e3b51297c44b91df684d33288c400c9ebd437119e6f87691393ccce0e06f
-
Size
581KB
-
Sample
230604-ywhesaeb6t
-
MD5
442172682178483617394a4f808d68fd
-
SHA1
92e579b14e8bbec962ea54e19d9c8066a755a1c1
-
SHA256
6830e3b51297c44b91df684d33288c400c9ebd437119e6f87691393ccce0e06f
-
SHA512
9d61eab110523f7838ca67f30c2f553a5072a932f2d88788bf64748254d727b01ed98f9e007de2b95b985d1faa97f2cb9a1d79738096db5444a4b10aa2a0ff48
-
SSDEEP
12288:9MrLy90cEMduDZ7EdBjI+7bmVb2OGhaob7U0iR:+yhMZSHmV6OKacU
Static task
static1
Behavioral task
behavioral1
Sample
6830e3b51297c44b91df684d33288c400c9ebd437119e6f87691393ccce0e06f.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
6830e3b51297c44b91df684d33288c400c9ebd437119e6f87691393ccce0e06f
-
Size
581KB
-
MD5
442172682178483617394a4f808d68fd
-
SHA1
92e579b14e8bbec962ea54e19d9c8066a755a1c1
-
SHA256
6830e3b51297c44b91df684d33288c400c9ebd437119e6f87691393ccce0e06f
-
SHA512
9d61eab110523f7838ca67f30c2f553a5072a932f2d88788bf64748254d727b01ed98f9e007de2b95b985d1faa97f2cb9a1d79738096db5444a4b10aa2a0ff48
-
SSDEEP
12288:9MrLy90cEMduDZ7EdBjI+7bmVb2OGhaob7U0iR:+yhMZSHmV6OKacU
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-