General
-
Target
ea53d105d5c4ed9815deaf46fa8d6a773c67441debbb813ae6607212299f79ee
-
Size
388KB
-
Sample
230622-qzb36sga5t
-
MD5
5a74f6840af6c79fd650cee9f5b9700a
-
SHA1
e820f798f0feefde74dfca31ae5f84ecdaa9288d
-
SHA256
ea53d105d5c4ed9815deaf46fa8d6a773c67441debbb813ae6607212299f79ee
-
SHA512
ad732a86df320a6a556f18b6890583ddd1d2756afad3bfa0130ee2bd28462700fdacda0d648c25732dbc3c3958388222d2c1d7fe6d94e1c2c762b516032ef631
-
SSDEEP
12288:8ztKeEjWeeIOZkagmc0D57ABb0wTH1b/rbOxzrnb2OA8efJUZmM:8kOee63A6M
Static task
static1
Malware Config
Extracted
redline
furga
83.97.73.128:19071
-
auth_value
1b7af6db7a79a3475798fcf494818be7
Targets
-
-
Target
ea53d105d5c4ed9815deaf46fa8d6a773c67441debbb813ae6607212299f79ee
-
Size
388KB
-
MD5
5a74f6840af6c79fd650cee9f5b9700a
-
SHA1
e820f798f0feefde74dfca31ae5f84ecdaa9288d
-
SHA256
ea53d105d5c4ed9815deaf46fa8d6a773c67441debbb813ae6607212299f79ee
-
SHA512
ad732a86df320a6a556f18b6890583ddd1d2756afad3bfa0130ee2bd28462700fdacda0d648c25732dbc3c3958388222d2c1d7fe6d94e1c2c762b516032ef631
-
SSDEEP
12288:8ztKeEjWeeIOZkagmc0D57ABb0wTH1b/rbOxzrnb2OA8efJUZmM:8kOee63A6M
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-