General
-
Target
0x00070000000133d2-118.dat
-
Size
172KB
-
Sample
230619-l4fjyadb59
-
MD5
ef77bfda8565049a2ca9ae492f4a34e7
-
SHA1
c42d14415f0b2b4dc99ea42a91283584c33a719e
-
SHA256
5c541b8ba9f7f4d1086c806d1e0a929a5893367704e2abf75642d6a589817903
-
SHA512
22c3f80ba156b801edd8657ea9172f5389586a279cd971343eb1dd04270dd52e260d0cfda4125cb80e66b5485b1538a69c666f95865b125a5ae05056ebe494bb
-
SSDEEP
3072:Ek/Ahs68FdlOFtQLxN46UbpLNqlOOE8e8h4:EkjF38VLNqlOOE
Behavioral task
behavioral1
Sample
0x00070000000133d2-118.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.128:19071
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
0x00070000000133d2-118.dat
-
Size
172KB
-
MD5
ef77bfda8565049a2ca9ae492f4a34e7
-
SHA1
c42d14415f0b2b4dc99ea42a91283584c33a719e
-
SHA256
5c541b8ba9f7f4d1086c806d1e0a929a5893367704e2abf75642d6a589817903
-
SHA512
22c3f80ba156b801edd8657ea9172f5389586a279cd971343eb1dd04270dd52e260d0cfda4125cb80e66b5485b1538a69c666f95865b125a5ae05056ebe494bb
-
SSDEEP
3072:Ek/Ahs68FdlOFtQLxN46UbpLNqlOOE8e8h4:EkjF38VLNqlOOE
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-