General
- Target a91bc778c643710d36b72dad8721937e.exe
- Size 318KB
- Sample230613-2zh29scb38
- SHA256 5524ca02c5f2cc4add6ef62eda26ce11c2d3ef5560f472a274d3c3a2f2c68e86
- MD5 a91bc778c643710d36b72dad8721937e
- SHA1 354f8e3641a7523cc854ff4f5f21fdab74f9135f
- SHA512 2182134414f1767b0451ff6a6920671c12239d51c92ca772195a576c7a754fc10d54c0f156e274488730aba99aa453c35b517342e0d6969e0aa8707fd487fdd9
- SSDEEP 6144:lZFbpWS7dPwcncgqY704pnH7hYx7oPG5RU0nC7:pt5YcncgqYTVYxPRU0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
a91bc778c643710d36b72dad8721937e.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
rovno
C2
-
83.97.73.130:19061
Attributes
-
auth_value
88306b072bfae0d9e44ed86a222b439d
Targets
-
- Target a91bc778c643710d36b72dad8721937e.exe
- Size 318KB
- SHA256 5524ca02c5f2cc4add6ef62eda26ce11c2d3ef5560f472a274d3c3a2f2c68e86
- MD5 a91bc778c643710d36b72dad8721937e
- SHA1 354f8e3641a7523cc854ff4f5f21fdab74f9135f
- SHA512 2182134414f1767b0451ff6a6920671c12239d51c92ca772195a576c7a754fc10d54c0f156e274488730aba99aa453c35b517342e0d6969e0aa8707fd487fdd9
- SSDEEP 6144:lZFbpWS7dPwcncgqY704pnH7hYx7oPG5RU0nC7:pt5YcncgqYTVYxPRU0
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.