General
- Target 490d8aa08047a287bb355ad01e0b4686.exe
- Size 336KB
- Sample230618-ptf99sgd41
- SHA256 cc0cb5e7f82ff2fcd0ab620eb50db924c5b5da99299a7e9fb8c32d6ba838162a
- MD5 490d8aa08047a287bb355ad01e0b4686
- SHA1 935334cafa9f035b6a92a75efd696fcc1205a3bc
- SHA512 ea39940821388a4513693c0a33039fbde2b3530640d68141c0eb1761d016933d8f2198f98dcffe28d9db59d3ba983cebe16b8dbdb3b931e5260cedff1c58c79b
- SSDEEP 3072:EG0A9qxBe+ToHQUp1eyrqGsStOpFeu7hgOawpyijHitpL4qDuo2PxL7K7gGWR9sa:L0A9qxBtEwUpdASt7u3sLXDEK7vQJQmL
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
490d8aa08047a287bb355ad01e0b4686.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
jason
C2
-
83.97.73.129:19071
Attributes
-
auth_value
87d1dc01751f148e9bec02edc71c5d94
Targets
-
- Target 490d8aa08047a287bb355ad01e0b4686.exe
- Size 336KB
- SHA256 cc0cb5e7f82ff2fcd0ab620eb50db924c5b5da99299a7e9fb8c32d6ba838162a
- MD5 490d8aa08047a287bb355ad01e0b4686
- SHA1 935334cafa9f035b6a92a75efd696fcc1205a3bc
- SHA512 ea39940821388a4513693c0a33039fbde2b3530640d68141c0eb1761d016933d8f2198f98dcffe28d9db59d3ba983cebe16b8dbdb3b931e5260cedff1c58c79b
- SSDEEP 3072:EG0A9qxBe+ToHQUp1eyrqGsStOpFeu7hgOawpyijHitpL4qDuo2PxL7K7gGWR9sa:L0A9qxBtEwUpdASt7u3sLXDEK7vQJQmL
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.