General
-
Target
7c402f6df2bf1d64668b3c3188bd296c.exe
-
Size
336KB
-
Sample
230618-k816rsee26
-
MD5
7c402f6df2bf1d64668b3c3188bd296c
-
SHA1
c84fd515d45877f57d36c46f5db757b700e2ee12
-
SHA256
4a509624369002589a8604133012f49600936974f8c21c09feeb24f2773ec0ba
-
SHA512
e7f54d20919a8cc3d6809790ce7f2c7f4e69a6bdd8a6548b9e1abbb5ba0dd7e386dd3be0ee5725e0c29aa2e70719a2a0a92646d8fd7137359e126838269f540f
-
SSDEEP
6144:p95AU6AcOt3vifASt7u3sLXDEKO7QJQmL:pXAZA7tfipLjDfEQJQmL
Static task
static1
Behavioral task
behavioral1
Sample
7c402f6df2bf1d64668b3c3188bd296c.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
jason
83.97.73.129:19071
-
auth_value
87d1dc01751f148e9bec02edc71c5d94
Targets
-
-
Target
7c402f6df2bf1d64668b3c3188bd296c.exe
-
Size
336KB
-
MD5
7c402f6df2bf1d64668b3c3188bd296c
-
SHA1
c84fd515d45877f57d36c46f5db757b700e2ee12
-
SHA256
4a509624369002589a8604133012f49600936974f8c21c09feeb24f2773ec0ba
-
SHA512
e7f54d20919a8cc3d6809790ce7f2c7f4e69a6bdd8a6548b9e1abbb5ba0dd7e386dd3be0ee5725e0c29aa2e70719a2a0a92646d8fd7137359e126838269f540f
-
SSDEEP
6144:p95AU6AcOt3vifASt7u3sLXDEKO7QJQmL:pXAZA7tfipLjDfEQJQmL
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-