General
- Target e74252f0dd59f9ccf58f1f582f7c2d62.exe
- Size 269KB
- Sample230623-g4xe8scf85
- SHA256 7847b3f2d359d1ffc7840b99b186ad86f09765bba9c9f8cd96762c7e706f9db3
- MD5 e74252f0dd59f9ccf58f1f582f7c2d62
- SHA1 573b760904ddf38dd30d005102417c2282fa9bbd
- SHA512 0df03b181196a4ad1e6a8576f5263449e90359db157995f91dc4004d027e1ba11b87f5a7ec094357b3dd69e706ab8a0740ad46f69f5d50b3ccd8dc4f03964b5e
- SSDEEP 6144:5tSKJigt0poiRG/XvLNUgYhuE22yQJQmT:5tS9gtAoiRG/fSv6QJQmT
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
e74252f0dd59f9ccf58f1f582f7c2d62.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target e74252f0dd59f9ccf58f1f582f7c2d62.exe
- Size 269KB
- SHA256 7847b3f2d359d1ffc7840b99b186ad86f09765bba9c9f8cd96762c7e706f9db3
- MD5 e74252f0dd59f9ccf58f1f582f7c2d62
- SHA1 573b760904ddf38dd30d005102417c2282fa9bbd
- SHA512 0df03b181196a4ad1e6a8576f5263449e90359db157995f91dc4004d027e1ba11b87f5a7ec094357b3dd69e706ab8a0740ad46f69f5d50b3ccd8dc4f03964b5e
- SSDEEP 6144:5tSKJigt0poiRG/XvLNUgYhuE22yQJQmT:5tS9gtAoiRG/fSv6QJQmT
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.