General
-
Target
0x00080000000122f7-83.dat
-
Size
172KB
-
Sample
230605-ljjqvsfg35
-
MD5
7868eecca8f99b6fedf25218a3469fff
-
SHA1
13f5e87b84a78271cc348b2c1766386139289b2c
-
SHA256
4bd5bf15677e090be06a9e9713444e0ce1b1d7e3aa431639fc3dfdc74324fbf8
-
SHA512
ec2f5cfb3a8d7b765ce94f19581f8f732d4fec87dd9ac7129c6f1ad1f79783b9b688ceb7ae6709c7306feff88fe4ff7d1dc441ac09dacbe97faf565bd2ace2ce
-
SSDEEP
3072:G+io48UwXVLCUD6xNZcJizueaE7i8e8h9:FioZNk1aE7i
Behavioral task
behavioral1
Sample
0x00080000000122f7-83.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
0x00080000000122f7-83.dat
-
Size
172KB
-
MD5
7868eecca8f99b6fedf25218a3469fff
-
SHA1
13f5e87b84a78271cc348b2c1766386139289b2c
-
SHA256
4bd5bf15677e090be06a9e9713444e0ce1b1d7e3aa431639fc3dfdc74324fbf8
-
SHA512
ec2f5cfb3a8d7b765ce94f19581f8f732d4fec87dd9ac7129c6f1ad1f79783b9b688ceb7ae6709c7306feff88fe4ff7d1dc441ac09dacbe97faf565bd2ace2ce
-
SSDEEP
3072:G+io48UwXVLCUD6xNZcJizueaE7i8e8h9:FioZNk1aE7i
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-