General
-
Target
632a3e893d53eaef3ffb221b125a75444df151d032ab7a55ce136490cdcfb751
-
Size
581KB
-
Sample
230604-ztc8qaed2w
-
MD5
578446ac6d291de02ae9722211b9d923
-
SHA1
2e42c3d058f414f9c81e727556a3ae620b47c169
-
SHA256
632a3e893d53eaef3ffb221b125a75444df151d032ab7a55ce136490cdcfb751
-
SHA512
301a77c9591033381687fc5ed488f473fdc0fc79125783984e5398271219f19152738c078258a8c96faaa1c161c6211c2f3717bc1852cc74f3dfc0703f0c60a1
-
SSDEEP
12288:3Mrjy90Su+hTN5FcQ06RNTmZzknFr0HwIBsWK7eDpHbmIkp:gy5u+0QxRsa0nBsn7eap
Static task
static1
Behavioral task
behavioral1
Sample
632a3e893d53eaef3ffb221b125a75444df151d032ab7a55ce136490cdcfb751.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
632a3e893d53eaef3ffb221b125a75444df151d032ab7a55ce136490cdcfb751
-
Size
581KB
-
MD5
578446ac6d291de02ae9722211b9d923
-
SHA1
2e42c3d058f414f9c81e727556a3ae620b47c169
-
SHA256
632a3e893d53eaef3ffb221b125a75444df151d032ab7a55ce136490cdcfb751
-
SHA512
301a77c9591033381687fc5ed488f473fdc0fc79125783984e5398271219f19152738c078258a8c96faaa1c161c6211c2f3717bc1852cc74f3dfc0703f0c60a1
-
SSDEEP
12288:3Mrjy90Su+hTN5FcQ06RNTmZzknFr0HwIBsWK7eDpHbmIkp:gy5u+0QxRsa0nBsn7eap
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-