General
-
Target
06583099.dat
-
Size
172KB
-
Sample
230606-nsbsqadd74
-
MD5
b8c8bdbdbf570c266178ffdd30fbe2fa
-
SHA1
82a412de72257fa34aa2940c08e484a0f8ab5b7c
-
SHA256
2395a8c43a3b013c8a71575b7dd69a732ebcfe0339403ef1374f2da880eb9021
-
SHA512
e891a7aa2051ec5b66d3a10a38c11229c9aa4b5e44dfd98e1acc4bc086b53a4f962808921b21c39dc223979d01834b8d9b315a6ab0d2306704a6456d4b35d40f
-
SSDEEP
3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA
Behavioral task
behavioral1
Sample
06583099.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19048
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
06583099.dat
-
Size
172KB
-
MD5
b8c8bdbdbf570c266178ffdd30fbe2fa
-
SHA1
82a412de72257fa34aa2940c08e484a0f8ab5b7c
-
SHA256
2395a8c43a3b013c8a71575b7dd69a732ebcfe0339403ef1374f2da880eb9021
-
SHA512
e891a7aa2051ec5b66d3a10a38c11229c9aa4b5e44dfd98e1acc4bc086b53a4f962808921b21c39dc223979d01834b8d9b315a6ab0d2306704a6456d4b35d40f
-
SSDEEP
3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-