General
-
Target
5e69dbb4f7aa15117e6527a0e69de7a94bfc1cea590a401ff734fc34a5711538
-
Size
581KB
-
Sample
230605-bczhmaeh6v
-
MD5
662c5ac0edba1723ab0501f081652345
-
SHA1
bcf288f72548d6fe6f19c43a230892201f2ca298
-
SHA256
5e69dbb4f7aa15117e6527a0e69de7a94bfc1cea590a401ff734fc34a5711538
-
SHA512
8cec945266747a7dfe63d03568581105fe8aa468911c4daf7aeea679d7b31460c08aac1951894d74e4d30b58256b561fe638d5d1f398feaf01ba288adfd51edb
-
SSDEEP
12288:lMrQy90BtAavUoCPEtfY91OYgQz1aAmbip4:FyUfvvtw9EQz1fmGp4
Static task
static1
Behavioral task
behavioral1
Sample
5e69dbb4f7aa15117e6527a0e69de7a94bfc1cea590a401ff734fc34a5711538.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
5e69dbb4f7aa15117e6527a0e69de7a94bfc1cea590a401ff734fc34a5711538
-
Size
581KB
-
MD5
662c5ac0edba1723ab0501f081652345
-
SHA1
bcf288f72548d6fe6f19c43a230892201f2ca298
-
SHA256
5e69dbb4f7aa15117e6527a0e69de7a94bfc1cea590a401ff734fc34a5711538
-
SHA512
8cec945266747a7dfe63d03568581105fe8aa468911c4daf7aeea679d7b31460c08aac1951894d74e4d30b58256b561fe638d5d1f398feaf01ba288adfd51edb
-
SSDEEP
12288:lMrQy90BtAavUoCPEtfY91OYgQz1aAmbip4:FyUfvvtw9EQz1fmGp4
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-