General
-
Target
eed2210b512bb1ff1ed5934499cbb78b212933832ee1637059a3ecc3e2ab8b65
-
Size
579KB
-
Sample
230605-lt3lqagc51
-
MD5
93541ce06aa6137dd0459ad7f633641f
-
SHA1
cd97cbc52b78d4fcc8bd01f736b610e93003015c
-
SHA256
eed2210b512bb1ff1ed5934499cbb78b212933832ee1637059a3ecc3e2ab8b65
-
SHA512
3e853bb1f2d549f020d621cb70356d734c663b1502a3d051d3455a21438d8f8c683d28aec974db3106549d78e4a5d48dc25e27de798bab2740e2f3a3896c29fb
-
SSDEEP
12288:EMrUy90iBOLNx8Ljn8a4b2WXTzhMFbAIrOa+eP9:YyRB1jnGbLhobjr3+eP9
Static task
static1
Behavioral task
behavioral1
Sample
eed2210b512bb1ff1ed5934499cbb78b212933832ee1637059a3ecc3e2ab8b65.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
eed2210b512bb1ff1ed5934499cbb78b212933832ee1637059a3ecc3e2ab8b65
-
Size
579KB
-
MD5
93541ce06aa6137dd0459ad7f633641f
-
SHA1
cd97cbc52b78d4fcc8bd01f736b610e93003015c
-
SHA256
eed2210b512bb1ff1ed5934499cbb78b212933832ee1637059a3ecc3e2ab8b65
-
SHA512
3e853bb1f2d549f020d621cb70356d734c663b1502a3d051d3455a21438d8f8c683d28aec974db3106549d78e4a5d48dc25e27de798bab2740e2f3a3896c29fb
-
SSDEEP
12288:EMrUy90iBOLNx8Ljn8a4b2WXTzhMFbAIrOa+eP9:YyRB1jnGbLhobjr3+eP9
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-