General
-
Target
8bf420fb51c41fa2d934886ca711293ac67b72f3fa3a95ecbc5504ece15ce41c
-
Size
255KB
-
Sample
230616-c716dace49
-
MD5
e64e7ff5b0d036a4a78a4f945ada7aef
-
SHA1
4dbad6e84ae25c0ecf9057f0b781a334fd3bcf81
-
SHA256
8bf420fb51c41fa2d934886ca711293ac67b72f3fa3a95ecbc5504ece15ce41c
-
SHA512
423bcfcce3db5607ad02f7ec3fd815e26d371f75c55ebb517f86fa3aa2033a80d2e413890d392c89f2aaba7eddaf13cbacbfd9cb4490fcdcf86913cc2f42fe0a
-
SSDEEP
6144:LQpWVr0TZC4xR4aPYaD4hYhJWJSW/Vevk:LEm0TZCO4r7
Static task
static1
Malware Config
Extracted
redline
joker
83.97.73.130:19061
-
auth_value
a98d303cc28bb3b32a23c59214ae3bc0
Targets
-
-
Target
8bf420fb51c41fa2d934886ca711293ac67b72f3fa3a95ecbc5504ece15ce41c
-
Size
255KB
-
MD5
e64e7ff5b0d036a4a78a4f945ada7aef
-
SHA1
4dbad6e84ae25c0ecf9057f0b781a334fd3bcf81
-
SHA256
8bf420fb51c41fa2d934886ca711293ac67b72f3fa3a95ecbc5504ece15ce41c
-
SHA512
423bcfcce3db5607ad02f7ec3fd815e26d371f75c55ebb517f86fa3aa2033a80d2e413890d392c89f2aaba7eddaf13cbacbfd9cb4490fcdcf86913cc2f42fe0a
-
SSDEEP
6144:LQpWVr0TZC4xR4aPYaD4hYhJWJSW/Vevk:LEm0TZCO4r7
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-