General
- Target 2d868cf7ea9b667788f21e546e3f4650.exe
- Size 337KB
- Sample230618-j9j37sec77
- SHA256 3b7ae6b4e5e3a76014fb29ec9ebb6e2add85961250df085eeff61bd48bb40851
- MD5 2d868cf7ea9b667788f21e546e3f4650
- SHA1 3ceeaec5a7d81fb70a10d353ffe1808cb9344ab7
- SHA512 60301c471d4f2838454b5815b110c98170830ecf576b91ab0566bee90a57ccb98b9e60bf5a2e1eae3454e8bba63a93f226119246ba9a24f5e01febade3d3bf8f
- SSDEEP 3072:zIarMOQK+L8Hv2TyIfyrqGsStOpFeu7hgOawpyijHitpL4qDuo2PxL7Kh/BGWR9m:carMOQJQP2TUASt7u3sLXDEKhMQJQm
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2d868cf7ea9b667788f21e546e3f4650.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
jason
C2
-
83.97.73.129:19071
Attributes
-
auth_value
87d1dc01751f148e9bec02edc71c5d94
Targets
-
- Target 2d868cf7ea9b667788f21e546e3f4650.exe
- Size 337KB
- SHA256 3b7ae6b4e5e3a76014fb29ec9ebb6e2add85961250df085eeff61bd48bb40851
- MD5 2d868cf7ea9b667788f21e546e3f4650
- SHA1 3ceeaec5a7d81fb70a10d353ffe1808cb9344ab7
- SHA512 60301c471d4f2838454b5815b110c98170830ecf576b91ab0566bee90a57ccb98b9e60bf5a2e1eae3454e8bba63a93f226119246ba9a24f5e01febade3d3bf8f
- SSDEEP 3072:zIarMOQK+L8Hv2TyIfyrqGsStOpFeu7hgOawpyijHitpL4qDuo2PxL7Kh/BGWR9m:carMOQJQP2TUASt7u3sLXDEKhMQJQm
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.