General
-
Target
0x0006000000014482-109.dat
-
Size
172KB
-
Sample
230606-aa8g3sbg9s
-
MD5
f17b925b89873e7378d7044d135f23e2
-
SHA1
a382efba677549ccd2e1019639a072a3ad58da26
-
SHA256
6fdd5e1f4426925be384b71188e67e5e8305143418321b6ce6389809d5a7690e
-
SHA512
fee1bdc466b2e124bdd7c41aa0e057e373945f4b57223e157dc338df638ebfbc23cb702fd986d96487b1db0950966f7574d020c123bd516b5dce73bda9a1aaf8
-
SSDEEP
3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+
Behavioral task
behavioral1
Sample
0x0006000000014482-109.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19048
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
0x0006000000014482-109.dat
-
Size
172KB
-
MD5
f17b925b89873e7378d7044d135f23e2
-
SHA1
a382efba677549ccd2e1019639a072a3ad58da26
-
SHA256
6fdd5e1f4426925be384b71188e67e5e8305143418321b6ce6389809d5a7690e
-
SHA512
fee1bdc466b2e124bdd7c41aa0e057e373945f4b57223e157dc338df638ebfbc23cb702fd986d96487b1db0950966f7574d020c123bd516b5dce73bda9a1aaf8
-
SSDEEP
3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-