General
-
Target
f9463009.exe
-
Size
172KB
-
Sample
230615-e32mfsef43
-
MD5
51ff7edfd485b1c4c99072d679c86b2e
-
SHA1
3db43be608c1bc136ed8a7cba9d12f937efcaf31
-
SHA256
f5e6a14f5d252cb79042fa01c2a96928d87fd03c0c946b25f76d563106fd7492
-
SHA512
0fbb3becedf060ad5f2ff1f677a51967686f5cea33ba43a23e98ea9f0e9c1fd9659d5ee93ca4cc3b7c94ed09bf60ea26c09a230285d796a2af191f5139c5f24d
-
SSDEEP
3072:PZ+q6hVbwIxxiIDg8qAxNKcbMhQ4k9o8e8hi:PZ+q6P7ihjB654k9o
Behavioral task
behavioral1
Sample
f9463009.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.130:19061
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
f9463009.exe
-
Size
172KB
-
MD5
51ff7edfd485b1c4c99072d679c86b2e
-
SHA1
3db43be608c1bc136ed8a7cba9d12f937efcaf31
-
SHA256
f5e6a14f5d252cb79042fa01c2a96928d87fd03c0c946b25f76d563106fd7492
-
SHA512
0fbb3becedf060ad5f2ff1f677a51967686f5cea33ba43a23e98ea9f0e9c1fd9659d5ee93ca4cc3b7c94ed09bf60ea26c09a230285d796a2af191f5139c5f24d
-
SSDEEP
3072:PZ+q6hVbwIxxiIDg8qAxNKcbMhQ4k9o8e8hi:PZ+q6P7ihjB654k9o
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-