General
-
Target
0x0006000000014ad2-112.dat
-
Size
172KB
-
Sample
230606-dgslzsbg79
-
MD5
edc62d3b29a4336d6f2b8d283f7ec29c
-
SHA1
dca69c2fd9ff7c7a808358008a4ef56ccc2e7b62
-
SHA256
ef2ad138b1d9dab4f7f2f40a11eeef1cdba6c35b9a1672ab1a8efd897eccdaa7
-
SHA512
0e387e4851e7eb7eef10a0be5c84bfaef8f8cef88746ae23f7b52988ba40dd924824d63d6245496f74af8a7396e304dace1be37c0472241a229bad2165d243d0
-
SSDEEP
3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+
Behavioral task
behavioral1
Sample
0x0006000000014ad2-112.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19048
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
0x0006000000014ad2-112.dat
-
Size
172KB
-
MD5
edc62d3b29a4336d6f2b8d283f7ec29c
-
SHA1
dca69c2fd9ff7c7a808358008a4ef56ccc2e7b62
-
SHA256
ef2ad138b1d9dab4f7f2f40a11eeef1cdba6c35b9a1672ab1a8efd897eccdaa7
-
SHA512
0e387e4851e7eb7eef10a0be5c84bfaef8f8cef88746ae23f7b52988ba40dd924824d63d6245496f74af8a7396e304dace1be37c0472241a229bad2165d243d0
-
SSDEEP
3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-