General
- Target fc4451aa4b09bf99bcf7804b9a00109c.exe
- Size 318KB
- Sample230614-cjebpsce74
- SHA256 de9eacbf9662d69c9ac2c2a6152f023d57801bc272f83bdaece3caaf36210be2
- MD5 fc4451aa4b09bf99bcf7804b9a00109c
- SHA1 8ebce6d900e89a8f38b30a8138813c308955dd16
- SHA512 8170d61d1121c83dc38843419070c49f4a2ed5c22e62163ba340d27ce3fd0dbf9b8570c6cbaabebf7aa8e36426241f28ce6f0221cd93d6dd0ad6910b8927f088
- SSDEEP 6144:g4wdriFXjI3MW8qY704pnH7hYx7oPG5RU0nCi:WQTI3MRqYTVYxPRU0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
fc4451aa4b09bf99bcf7804b9a00109c.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
rovno
C2
-
83.97.73.130:19061
Attributes
-
auth_value
88306b072bfae0d9e44ed86a222b439d
Targets
-
- Target fc4451aa4b09bf99bcf7804b9a00109c.exe
- Size 318KB
- SHA256 de9eacbf9662d69c9ac2c2a6152f023d57801bc272f83bdaece3caaf36210be2
- MD5 fc4451aa4b09bf99bcf7804b9a00109c
- SHA1 8ebce6d900e89a8f38b30a8138813c308955dd16
- SHA512 8170d61d1121c83dc38843419070c49f4a2ed5c22e62163ba340d27ce3fd0dbf9b8570c6cbaabebf7aa8e36426241f28ce6f0221cd93d6dd0ad6910b8927f088
- SSDEEP 6144:g4wdriFXjI3MW8qY704pnH7hYx7oPG5RU0nCi:WQTI3MRqYTVYxPRU0
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.