General
- Target 50dbcff5d09edcbc319b13d97fac047f.exe
- Size 269KB
- Sample230623-gnlc2ace46
- SHA256 f742febfd10cb7d19f21759f6d725c40ce90fb1a69013adedfc64b8dada81925
- MD5 50dbcff5d09edcbc319b13d97fac047f
- SHA1 9e01fea475573eaad7370f5e91ea55b32037700c
- SHA512 3fb669e06410d80d45a30833edc62ee6c226a4d31eff08f406ab47da48654bb4f64f4f0faa9e77d191b0977a7a7b41e1f950198fe191c50cadf4701c9d7c1e70
- SSDEEP 6144:d4mO1HjtSKJigt0poiRG/XvLNUgYhuE22JQJQmL:d4mO1DtS9gtAoiRG/fSvhQJQmL
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
50dbcff5d09edcbc319b13d97fac047f.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 50dbcff5d09edcbc319b13d97fac047f.exe
- Size 269KB
- SHA256 f742febfd10cb7d19f21759f6d725c40ce90fb1a69013adedfc64b8dada81925
- MD5 50dbcff5d09edcbc319b13d97fac047f
- SHA1 9e01fea475573eaad7370f5e91ea55b32037700c
- SHA512 3fb669e06410d80d45a30833edc62ee6c226a4d31eff08f406ab47da48654bb4f64f4f0faa9e77d191b0977a7a7b41e1f950198fe191c50cadf4701c9d7c1e70
- SSDEEP 6144:d4mO1HjtSKJigt0poiRG/XvLNUgYhuE22JQJQmL:d4mO1DtS9gtAoiRG/fSvhQJQmL
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.