General
- Target 7e69f4b7bfb4bd3890ef54a15b777a5c.exe
- Size 268KB
- Sample230622-wpqfpshh5x
- SHA256 5753cc6ed646f477448e8e0f41e65d3348deeb301c45eee47744ee41483e7a44
- MD5 7e69f4b7bfb4bd3890ef54a15b777a5c
- SHA1 3556578ffcbd8794a337519049935bbe96a76203
- SHA512 e47b0ea8bf29bce5c87d0b820b0c60cc94f87bc56995ab03ee0b8f48b0397db6d2569e18fbde6d910edd1e7fa0ce4c234ec854b367cf39952866ada65d552cf6
- SSDEEP 6144:Fkvw6igt0poiRG/XvLNUgYhuE228QJQmB:Fkv6gtAoiRG/fSvEQJQmB
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
7e69f4b7bfb4bd3890ef54a15b777a5c.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 7e69f4b7bfb4bd3890ef54a15b777a5c.exe
- Size 268KB
- SHA256 5753cc6ed646f477448e8e0f41e65d3348deeb301c45eee47744ee41483e7a44
- MD5 7e69f4b7bfb4bd3890ef54a15b777a5c
- SHA1 3556578ffcbd8794a337519049935bbe96a76203
- SHA512 e47b0ea8bf29bce5c87d0b820b0c60cc94f87bc56995ab03ee0b8f48b0397db6d2569e18fbde6d910edd1e7fa0ce4c234ec854b367cf39952866ada65d552cf6
- SSDEEP 6144:Fkvw6igt0poiRG/XvLNUgYhuE228QJQmB:Fkv6gtAoiRG/fSvEQJQmB
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.