General
- Target 6c89047587e9a464189493614e623c0e.exe
- Size 269KB
- Sample230623-grf8gsce69
- SHA256 174337b044eca9a2a4ec85989bfb11e64260d9b46c74949e868bc0a1a7ccce6f
- MD5 6c89047587e9a464189493614e623c0e
- SHA1 3152091928bcfa2012e4675bd0a176c14ae7e8e6
- SHA512 958af482f85fea1caf5fe73956c8325f915214928e57d4c2b5fd9d0a9353861c019290cf1a55a49c8339c7dca6c4a5391928b45937e9a598cdc8977b1491b2fe
- SSDEEP 6144:A0ueQ8igt0poiRG/XvLNUgYhuE22oQJQmT:A0ueIgtAoiRG/fSvAQJQmT
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
6c89047587e9a464189493614e623c0e.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 6c89047587e9a464189493614e623c0e.exe
- Size 269KB
- SHA256 174337b044eca9a2a4ec85989bfb11e64260d9b46c74949e868bc0a1a7ccce6f
- MD5 6c89047587e9a464189493614e623c0e
- SHA1 3152091928bcfa2012e4675bd0a176c14ae7e8e6
- SHA512 958af482f85fea1caf5fe73956c8325f915214928e57d4c2b5fd9d0a9353861c019290cf1a55a49c8339c7dca6c4a5391928b45937e9a598cdc8977b1491b2fe
- SSDEEP 6144:A0ueQ8igt0poiRG/XvLNUgYhuE22oQJQmT:A0ueIgtAoiRG/fSvAQJQmT
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.