General
- Target 9359d442fdcd24f1e8d608c65adc1913.exe
- Size 318KB
- Sample230614-g663fsdd43
- SHA256 1fc014209b6ea611c6b38bd3f77802ef1dcd9f43e61e98ac66f8d356f10dd176
- MD5 9359d442fdcd24f1e8d608c65adc1913
- SHA1 5dd340565e40f2fb068d95cfee8c35df7919fae0
- SHA512 5fc69d47c105480041da9fa153323628046f9c0dbb45227a2f0fe0cf6a8c0fd2b220e4b342f882451730ba02a35b494fa534fb16982bcea1b2a38f6d571100e6
- SSDEEP 6144:BHm6WsGgYVXHDJmqY704pnH7hYx7oPG5RU0nCi:DRcXHDEqYTVYxPRU0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
9359d442fdcd24f1e8d608c65adc1913.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
rovno
C2
-
83.97.73.130:19061
Attributes
-
auth_value
88306b072bfae0d9e44ed86a222b439d
Targets
-
- Target 9359d442fdcd24f1e8d608c65adc1913.exe
- Size 318KB
- SHA256 1fc014209b6ea611c6b38bd3f77802ef1dcd9f43e61e98ac66f8d356f10dd176
- MD5 9359d442fdcd24f1e8d608c65adc1913
- SHA1 5dd340565e40f2fb068d95cfee8c35df7919fae0
- SHA512 5fc69d47c105480041da9fa153323628046f9c0dbb45227a2f0fe0cf6a8c0fd2b220e4b342f882451730ba02a35b494fa534fb16982bcea1b2a38f6d571100e6
- SSDEEP 6144:BHm6WsGgYVXHDJmqY704pnH7hYx7oPG5RU0nCi:DRcXHDEqYTVYxPRU0
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.