General
- Target ebfb758a20885983a742c2ebe93947b4.exe
- Size 318KB
- Sample230614-db6awscg35
- SHA256 3414e421b9fe7ab68dcb492c20cb6a67a8d061711acd3baff0bcd3a24eb8a276
- MD5 ebfb758a20885983a742c2ebe93947b4
- SHA1 b91aa25f76040ab693847b5a68e4f23e45a73f6c
- SHA512 ca8dcc08c290aa52f14420cabcc2614c7811fb39a4fe7e3597bc373d0726645024a5f2149b10b1b2bd2298ce96c6ad8163849c272c2b148ce4abf4ce2686a800
- SSDEEP 6144:6WmxfwqinLkGnlpqY704pnH7hYx7oPG5RU0nCy:TqGIGnlpqYTVYxPRU0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
ebfb758a20885983a742c2ebe93947b4.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
rovno
C2
-
83.97.73.130:19061
Attributes
-
auth_value
88306b072bfae0d9e44ed86a222b439d
Targets
-
- Target ebfb758a20885983a742c2ebe93947b4.exe
- Size 318KB
- SHA256 3414e421b9fe7ab68dcb492c20cb6a67a8d061711acd3baff0bcd3a24eb8a276
- MD5 ebfb758a20885983a742c2ebe93947b4
- SHA1 b91aa25f76040ab693847b5a68e4f23e45a73f6c
- SHA512 ca8dcc08c290aa52f14420cabcc2614c7811fb39a4fe7e3597bc373d0726645024a5f2149b10b1b2bd2298ce96c6ad8163849c272c2b148ce4abf4ce2686a800
- SSDEEP 6144:6WmxfwqinLkGnlpqY704pnH7hYx7oPG5RU0nCy:TqGIGnlpqYTVYxPRU0
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.