General
-
Target
f400406675e078e6465430676ab8efc736fe42d52d38fb02c7829840d301e317
-
Size
580KB
-
Sample
230605-aabhcaeb94
-
MD5
3d33cc4a4007bf7d7e26dae656fab795
-
SHA1
e908a0268e62aa3cbc70fb40276eccde98455106
-
SHA256
f400406675e078e6465430676ab8efc736fe42d52d38fb02c7829840d301e317
-
SHA512
67e5f38d74a6bdbfcec27519ac441cd576d8537fdc31d52876aedd5c8f415ce042e10b4d45e7bc24c31963f0afcc7c508ac2de5a3991a6aa4a400b44faf9b7b9
-
SSDEEP
12288:aMrWy90/gB9v1iFA7j8cZMdxSTjRGBsD7FKWvUkxxJI3ZB:MylNSi8cydANGBiAWFxx4
Static task
static1
Behavioral task
behavioral1
Sample
f400406675e078e6465430676ab8efc736fe42d52d38fb02c7829840d301e317.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
f400406675e078e6465430676ab8efc736fe42d52d38fb02c7829840d301e317
-
Size
580KB
-
MD5
3d33cc4a4007bf7d7e26dae656fab795
-
SHA1
e908a0268e62aa3cbc70fb40276eccde98455106
-
SHA256
f400406675e078e6465430676ab8efc736fe42d52d38fb02c7829840d301e317
-
SHA512
67e5f38d74a6bdbfcec27519ac441cd576d8537fdc31d52876aedd5c8f415ce042e10b4d45e7bc24c31963f0afcc7c508ac2de5a3991a6aa4a400b44faf9b7b9
-
SSDEEP
12288:aMrWy90/gB9v1iFA7j8cZMdxSTjRGBsD7FKWvUkxxJI3ZB:MylNSi8cydANGBiAWFxx4
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-