General
- Target 77e3e6a4f56b17a48745a7c4937fc82e.exe
- Size 251KB
- Sample230618-xcbmfsha76
- SHA256 76f29168e447c07f9b92d42c94bd164bafd9cfd62dc96de4551debf3cab1bbfd
- MD5 77e3e6a4f56b17a48745a7c4937fc82e
- SHA1 ff5a99efb0a869b1eb6a5ff34500dd2d5c2095c3
- SHA512 642e536895820867cf76465a8aeb54f11c5402585e1f4958dc452eba5e33c8e032667746cf104d7bdc8959cc938f18835de032be2ec70d7c38007258bf94d7ef
- SSDEEP 3072:Z3n2GO45aCrbyEqGsStOpFeu7hgOawpyijHitpL4qDuo2PxL7KVl:Z3nEFCFASt7u3sLXDEKV
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
77e3e6a4f56b17a48745a7c4937fc82e.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
jason
C2
-
83.97.73.129:19071
Attributes
-
auth_value
87d1dc01751f148e9bec02edc71c5d94
Targets
-
- Target 77e3e6a4f56b17a48745a7c4937fc82e.exe
- Size 251KB
- SHA256 76f29168e447c07f9b92d42c94bd164bafd9cfd62dc96de4551debf3cab1bbfd
- MD5 77e3e6a4f56b17a48745a7c4937fc82e
- SHA1 ff5a99efb0a869b1eb6a5ff34500dd2d5c2095c3
- SHA512 642e536895820867cf76465a8aeb54f11c5402585e1f4958dc452eba5e33c8e032667746cf104d7bdc8959cc938f18835de032be2ec70d7c38007258bf94d7ef
- SSDEEP 3072:Z3n2GO45aCrbyEqGsStOpFeu7hgOawpyijHitpL4qDuo2PxL7KVl:Z3nEFCFASt7u3sLXDEKV
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.