General
-
Target
b5bbb7670e09483c7cc5b11fc36948b2692faed1dd801d7e19fdb8cd78f9bef8
-
Size
389KB
-
Sample
230622-l2hxaafa9s
-
MD5
3abb3330c950029a8ce7803718c11879
-
SHA1
a79cffc3f6f99b689fa66ef312c26de78d5a1ba1
-
SHA256
b5bbb7670e09483c7cc5b11fc36948b2692faed1dd801d7e19fdb8cd78f9bef8
-
SHA512
ea8666f0ae6074d5c9175d86b42b7808c8fd8d2ecc99a9f465b9e37565638290158d40205ec19c37e7d1beb0f77496ee2cff46a60b8043a44fc24502cadcac10
-
SSDEEP
12288:RztKe+jWeeIO6eRgmc0D57ABb0wTH1b/rbOxzrnb2OA8efJUZmM:Rkseee3A6M
Static task
static1
Malware Config
Extracted
redline
furga
83.97.73.128:19071
-
auth_value
1b7af6db7a79a3475798fcf494818be7
Targets
-
-
Target
b5bbb7670e09483c7cc5b11fc36948b2692faed1dd801d7e19fdb8cd78f9bef8
-
Size
389KB
-
MD5
3abb3330c950029a8ce7803718c11879
-
SHA1
a79cffc3f6f99b689fa66ef312c26de78d5a1ba1
-
SHA256
b5bbb7670e09483c7cc5b11fc36948b2692faed1dd801d7e19fdb8cd78f9bef8
-
SHA512
ea8666f0ae6074d5c9175d86b42b7808c8fd8d2ecc99a9f465b9e37565638290158d40205ec19c37e7d1beb0f77496ee2cff46a60b8043a44fc24502cadcac10
-
SSDEEP
12288:RztKe+jWeeIO6eRgmc0D57ABb0wTH1b/rbOxzrnb2OA8efJUZmM:Rkseee3A6M
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-