General
- Target 34a47e95e251b4f472e9233ccadd3388.exe
- Size 269KB
- Sample230623-gm1fkace35
- SHA256 9d16c3644d9c90fa28dfd5777663bc3a6f886403f2bbdbf64a4e453ee3d5e08c
- MD5 34a47e95e251b4f472e9233ccadd3388
- SHA1 ecb5ff12a6b9895e6539faca42573c87b27e4ab9
- SHA512 a10fd3064e4e200a428f8dabbb47d38065555ac3244af11e309f288afe020c489ccf52f3a92ef706c998d170e0b53c11fa274377916d7ce804e834aa86e4b977
- SSDEEP 6144:ftSKJigt0poiRG/XvLNUgYhuE22EQQJQmp:ftS9gtAoiRG/fSvMQQJQmp
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
34a47e95e251b4f472e9233ccadd3388.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 34a47e95e251b4f472e9233ccadd3388.exe
- Size 269KB
- SHA256 9d16c3644d9c90fa28dfd5777663bc3a6f886403f2bbdbf64a4e453ee3d5e08c
- MD5 34a47e95e251b4f472e9233ccadd3388
- SHA1 ecb5ff12a6b9895e6539faca42573c87b27e4ab9
- SHA512 a10fd3064e4e200a428f8dabbb47d38065555ac3244af11e309f288afe020c489ccf52f3a92ef706c998d170e0b53c11fa274377916d7ce804e834aa86e4b977
- SSDEEP 6144:ftSKJigt0poiRG/XvLNUgYhuE22EQQJQmp:ftS9gtAoiRG/fSvMQQJQmp
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.