General
-
Target
0x000600000001448a-83.dat
-
Size
172KB
-
Sample
230606-c3r2xabg37
-
MD5
9462b8d5702ce437548aff5ec63c1ad5
-
SHA1
c023046a006787dba4b845ed61b6d5bef6b80ada
-
SHA256
d405985393cf1eac9fab9279467de751d6c272eaddc02af5a4f7a9179916a7df
-
SHA512
3c9779cda48a5a31b0918e2c9ba26c78a144e3939b512e42fd652c26ea72447bab84491332a41f33e734f90576c1381ff202a8ac434d8e69447e2a9974a868d2
-
SSDEEP
3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA
Behavioral task
behavioral1
Sample
0x000600000001448a-83.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19048
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
0x000600000001448a-83.dat
-
Size
172KB
-
MD5
9462b8d5702ce437548aff5ec63c1ad5
-
SHA1
c023046a006787dba4b845ed61b6d5bef6b80ada
-
SHA256
d405985393cf1eac9fab9279467de751d6c272eaddc02af5a4f7a9179916a7df
-
SHA512
3c9779cda48a5a31b0918e2c9ba26c78a144e3939b512e42fd652c26ea72447bab84491332a41f33e734f90576c1381ff202a8ac434d8e69447e2a9974a868d2
-
SSDEEP
3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-