General
- Target 1418cf870732f4312320b6362ef73d9a.exe
- Size 269KB
- Sample230623-ng5awsed54
- SHA256 32c3f57fd706aa2f5384cc3adda5007e7c28dbea002d0f5dcc0958f60cb1eedc
- MD5 1418cf870732f4312320b6362ef73d9a
- SHA1 8cdb32887ca1b29ec1ed07bf415638aa2dd88afa
- SHA512 98fbcbec729d6ccdb68cbcd8f8c10aa188965e6c5c305803a88e7c1e0de337efec4959e8dbb131da299a3e8f2f10c8c21757a868137f06da7eb43310ae0461c8
- SSDEEP 6144:2itSKJigt0poiRG/XvLNUgYhuE220QJQmB:2itS9gtAoiRG/fSv8QJQmB
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
1418cf870732f4312320b6362ef73d9a.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 1418cf870732f4312320b6362ef73d9a.exe
- Size 269KB
- SHA256 32c3f57fd706aa2f5384cc3adda5007e7c28dbea002d0f5dcc0958f60cb1eedc
- MD5 1418cf870732f4312320b6362ef73d9a
- SHA1 8cdb32887ca1b29ec1ed07bf415638aa2dd88afa
- SHA512 98fbcbec729d6ccdb68cbcd8f8c10aa188965e6c5c305803a88e7c1e0de337efec4959e8dbb131da299a3e8f2f10c8c21757a868137f06da7eb43310ae0461c8
- SSDEEP 6144:2itSKJigt0poiRG/XvLNUgYhuE220QJQmB:2itS9gtAoiRG/fSv8QJQmB
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.