General
- Target 837bca31359b6a4c73cfff8eb3944b29.exe
- Size 270KB
- Sample230622-xbrbhsgh22
- SHA256 eed2efb4c4e0b1f65fb0930845b30ddf84ee71b8ea7a1efdbb80d4ac342bb9ef
- MD5 837bca31359b6a4c73cfff8eb3944b29
- SHA1 2d0122f945d47654d6edbe2bb9a4142d8771d272
- SHA512 4177e9ff3b13649c101dcbdf5f3468d30f38e6b71c8f52dd3ac93852b8ec3f8bca685504e1b12afeb2c203c1d5f2275850159aa92df35b24f581a45d0763b68e
- SSDEEP 6144:Nq3wnigt0poiRG/XvLNUgYhuE22RQJQmb:Nq3hgtAoiRG/fSv5QJQmb
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
837bca31359b6a4c73cfff8eb3944b29.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 837bca31359b6a4c73cfff8eb3944b29.exe
- Size 270KB
- SHA256 eed2efb4c4e0b1f65fb0930845b30ddf84ee71b8ea7a1efdbb80d4ac342bb9ef
- MD5 837bca31359b6a4c73cfff8eb3944b29
- SHA1 2d0122f945d47654d6edbe2bb9a4142d8771d272
- SHA512 4177e9ff3b13649c101dcbdf5f3468d30f38e6b71c8f52dd3ac93852b8ec3f8bca685504e1b12afeb2c203c1d5f2275850159aa92df35b24f581a45d0763b68e
- SSDEEP 6144:Nq3wnigt0poiRG/XvLNUgYhuE22RQJQmb:Nq3hgtAoiRG/fSv5QJQmb
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.