General
- Target 6dadf1f22fcb9d68aff50ea58853ce22.exe
- Size 269KB
- Sample230623-grgh9ace75
- SHA256 297d0623468ae151eb4d3bd07fd191911701537c91be82bb653d9e31cf676d2d
- MD5 6dadf1f22fcb9d68aff50ea58853ce22
- SHA1 f94001e1d8ffb5d221aa0f17e919064363785b95
- SHA512 b30ad1632173073dcde539346f228580c7b5deca6f92063afda0deee9f07f3185e1e6ac551addb2b23e1f30f539a86a86a489a850e1db77c86dd4c7774c8a348
- SSDEEP 6144:2tSKJigt0poiRG/XvLNUgYhuE22qQJQmL:2tS9gtAoiRG/fSviQJQmL
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
6dadf1f22fcb9d68aff50ea58853ce22.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 6dadf1f22fcb9d68aff50ea58853ce22.exe
- Size 269KB
- SHA256 297d0623468ae151eb4d3bd07fd191911701537c91be82bb653d9e31cf676d2d
- MD5 6dadf1f22fcb9d68aff50ea58853ce22
- SHA1 f94001e1d8ffb5d221aa0f17e919064363785b95
- SHA512 b30ad1632173073dcde539346f228580c7b5deca6f92063afda0deee9f07f3185e1e6ac551addb2b23e1f30f539a86a86a489a850e1db77c86dd4c7774c8a348
- SSDEEP 6144:2tSKJigt0poiRG/XvLNUgYhuE22qQJQmL:2tS9gtAoiRG/fSviQJQmL
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.