General
- Target 6f830823d36149fb7bcc026d06a8151d.exe
- Size 251KB
- Sample230618-xcbmfsha75
- SHA256 67da3e8ccb76e565dc1a899bb96b5d51e16db231eccfe593505ff15af29e5ae2
- MD5 6f830823d36149fb7bcc026d06a8151d
- SHA1 b20f08bfb73ee78e164db17c75452d1793f7fff3
- SHA512 ce2b20b12064b29de97e233ac62af04d5890ff0779de249a935f77479072bd13d156e6a93b12a90b0e55f9efbd8d72a0bac3b7a668e020eca396f152ed627b8f
- SSDEEP 3072:FSRlTWaSS3wyEqGsStOpFeu7hgOawpyijHitpL4qDuo2PxL7K9M:FcJSfASt7u3sLXDEK9
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6f830823d36149fb7bcc026d06a8151d.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
jason
C2
-
83.97.73.129:19071
Attributes
-
auth_value
87d1dc01751f148e9bec02edc71c5d94
Targets
-
- Target 6f830823d36149fb7bcc026d06a8151d.exe
- Size 251KB
- SHA256 67da3e8ccb76e565dc1a899bb96b5d51e16db231eccfe593505ff15af29e5ae2
- MD5 6f830823d36149fb7bcc026d06a8151d
- SHA1 b20f08bfb73ee78e164db17c75452d1793f7fff3
- SHA512 ce2b20b12064b29de97e233ac62af04d5890ff0779de249a935f77479072bd13d156e6a93b12a90b0e55f9efbd8d72a0bac3b7a668e020eca396f152ed627b8f
- SSDEEP 3072:FSRlTWaSS3wyEqGsStOpFeu7hgOawpyijHitpL4qDuo2PxL7K9M:FcJSfASt7u3sLXDEK9
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.