General
- Target 890f1cc7d1bca39b929e3a0ab4c46d26.exe
- Size 272KB
- Sample230620-gttatsbd3y
- SHA256 8f346c975ebe1bb1d7183cde56d4e579b0d6ebbca44c929d62d0be48a3bfd3a9
- MD5 890f1cc7d1bca39b929e3a0ab4c46d26
- SHA1 47adf07dbf3e08d1689be182d3574f741a996f77
- SHA512 b505c2acfeb61387cc4013390db2f1924dfdd10a6c8c822276b9fc4aafc418f7050d17fbd72ea019d9ea84f0bf1a29433c65c0021c92beba500bf37d11456183
- SSDEEP 6144:NXgA2TQ0FKHgKNRBH13TLxNP9T0x+SRMR:JgbQzgMLxNFYv
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
890f1cc7d1bca39b929e3a0ab4c46d26.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
furga
C2
-
83.97.73.128:19071
Attributes
-
auth_value
1b7af6db7a79a3475798fcf494818be7
Targets
-
- Target 890f1cc7d1bca39b929e3a0ab4c46d26.exe
- Size 272KB
- SHA256 8f346c975ebe1bb1d7183cde56d4e579b0d6ebbca44c929d62d0be48a3bfd3a9
- MD5 890f1cc7d1bca39b929e3a0ab4c46d26
- SHA1 47adf07dbf3e08d1689be182d3574f741a996f77
- SHA512 b505c2acfeb61387cc4013390db2f1924dfdd10a6c8c822276b9fc4aafc418f7050d17fbd72ea019d9ea84f0bf1a29433c65c0021c92beba500bf37d11456183
- SSDEEP 6144:NXgA2TQ0FKHgKNRBH13TLxNP9T0x+SRMR:JgbQzgMLxNFYv
- MD5 SHA1 SHA512 SSDEEP
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.