General
- Target 4896b4340e46f8af45c989406726e4c0.exe
- Size 269KB
- Sample230623-mpdmgafe2w
- SHA256 cdced77db448a467f8b933bc58c95c82f0766f0c4f5bbe8da222f61cd4118673
- MD5 4896b4340e46f8af45c989406726e4c0
- SHA1 28b8f3a68bdb2bb361a9eb23ee7bd3ef7d284e66
- SHA512 2b7ee76104926000efdabbd81837d2ee1599ef6ae071947369954ff96f732f9ebe946dda4825bf18719c9fd746bf21e23592980ae4fee272b2cecab3fb135ed3
- SSDEEP 6144:/BVRaigt0poiRG/XvLNUgYhuE22EQJQmp:/BVPgtAoiRG/fSvcQJQmp
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
4896b4340e46f8af45c989406726e4c0.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 4896b4340e46f8af45c989406726e4c0.exe
- Size 269KB
- SHA256 cdced77db448a467f8b933bc58c95c82f0766f0c4f5bbe8da222f61cd4118673
- MD5 4896b4340e46f8af45c989406726e4c0
- SHA1 28b8f3a68bdb2bb361a9eb23ee7bd3ef7d284e66
- SHA512 2b7ee76104926000efdabbd81837d2ee1599ef6ae071947369954ff96f732f9ebe946dda4825bf18719c9fd746bf21e23592980ae4fee272b2cecab3fb135ed3
- SSDEEP 6144:/BVRaigt0poiRG/XvLNUgYhuE22EQJQmp:/BVPgtAoiRG/fSvcQJQmp
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.