General
- Target 46a08d6bef293e27eec07f861b360347.exe
- Size 269KB
- Sample230623-gm124ace43
- SHA256 5e8718b0eb902b73001ae7fa13cc97e089fb994ecfe616819f5433f49fc0b9bc
- MD5 46a08d6bef293e27eec07f861b360347
- SHA1 36f3b58820753a3c5275b20cb7b15a5961e4a00d
- SHA512 fa08c3c6b758c40765d29b5460334beb892ef3b2411b99ed7e9d0159212557827e22c94d4cd79f3db4896169024175037be0cd5ce74d57a1137314f9e9809d61
- SSDEEP 6144:wghSpigt0poiRG/XvLNUgYhuE220QJQmB:wghFgtAoiRG/fSvcQJQmB
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
46a08d6bef293e27eec07f861b360347.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 46a08d6bef293e27eec07f861b360347.exe
- Size 269KB
- SHA256 5e8718b0eb902b73001ae7fa13cc97e089fb994ecfe616819f5433f49fc0b9bc
- MD5 46a08d6bef293e27eec07f861b360347
- SHA1 36f3b58820753a3c5275b20cb7b15a5961e4a00d
- SHA512 fa08c3c6b758c40765d29b5460334beb892ef3b2411b99ed7e9d0159212557827e22c94d4cd79f3db4896169024175037be0cd5ce74d57a1137314f9e9809d61
- SSDEEP 6144:wghSpigt0poiRG/XvLNUgYhuE220QJQmB:wghFgtAoiRG/fSvcQJQmB
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.