General
-
Target
85a008e09de597dd77f65f1e4033877f335056b9a40d02c9ddfd7bcedbcc0043
-
Size
580KB
-
Sample
230604-z8vfjsdg76
-
MD5
1effb71bacb733e8a84ae6dd0494b62a
-
SHA1
5ee966b5a3d8b30b29de69acc230b8140ed31c33
-
SHA256
85a008e09de597dd77f65f1e4033877f335056b9a40d02c9ddfd7bcedbcc0043
-
SHA512
0749f1f37a28699ff3cf75e823eefb5052b443fa29c5f07eaaae70fa748815ba0d1a0a44d5d97a769a07de34e796f9dd9bc244c70338f686ad8ad06879694f4b
-
SSDEEP
12288:AMrxy90+WR5SsLGtTQHG9csOVRjYjvJLe9zPYhA+bypx:hy8zwUHG6RkrOrYfbC
Static task
static1
Behavioral task
behavioral1
Sample
85a008e09de597dd77f65f1e4033877f335056b9a40d02c9ddfd7bcedbcc0043.exe
Resource
win10v2004-20230221-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
85a008e09de597dd77f65f1e4033877f335056b9a40d02c9ddfd7bcedbcc0043
-
Size
580KB
-
MD5
1effb71bacb733e8a84ae6dd0494b62a
-
SHA1
5ee966b5a3d8b30b29de69acc230b8140ed31c33
-
SHA256
85a008e09de597dd77f65f1e4033877f335056b9a40d02c9ddfd7bcedbcc0043
-
SHA512
0749f1f37a28699ff3cf75e823eefb5052b443fa29c5f07eaaae70fa748815ba0d1a0a44d5d97a769a07de34e796f9dd9bc244c70338f686ad8ad06879694f4b
-
SSDEEP
12288:AMrxy90+WR5SsLGtTQHG9csOVRjYjvJLe9zPYhA+bypx:hy8zwUHG6RkrOrYfbC
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-