General
- Target 01b6219a2713c7ed9a037b57c11cb633.exe
- Size 1.3MB
- Sample230623-thb9dsha9z
- SHA256 cbcbcf230ab49902866ebb16670e89af1bafbc885916ae7d34ec0ad62e8865da
- MD5 01b6219a2713c7ed9a037b57c11cb633
- SHA1 5f0d04ceff3cde756de4764ca5d7d6a31913a63d
- SHA512 cd26504093772e3f1c9132e167ee80b25492bbfdbbcab6819402c7ed1e27e549d9ac35a843e2cd4e18a6de85d01c86985c4597d1c4dd2eb62473c6935cd2609d
- SSDEEP 24576:zCO0vr2pO7LlkgaV424NzsmSHxuMj+rW5f5T5DURi3rTZJm6/jXL3L50ClDQ7U3x:zCDr28gNlMS5RT5QobTZJmkjrSiQ7EaF
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
01b6219a2713c7ed9a037b57c11cb633.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
drake
C2
-
83.97.73.131:19071
Attributes
-
auth_value
74ce6ffe4025a2e4027fb727915e7d7c
Targets
-
- Target 01b6219a2713c7ed9a037b57c11cb633.exe
- Size 1.3MB
- SHA256 cbcbcf230ab49902866ebb16670e89af1bafbc885916ae7d34ec0ad62e8865da
- MD5 01b6219a2713c7ed9a037b57c11cb633
- SHA1 5f0d04ceff3cde756de4764ca5d7d6a31913a63d
- SHA512 cd26504093772e3f1c9132e167ee80b25492bbfdbbcab6819402c7ed1e27e549d9ac35a843e2cd4e18a6de85d01c86985c4597d1c4dd2eb62473c6935cd2609d
- SSDEEP 24576:zCO0vr2pO7LlkgaV424NzsmSHxuMj+rW5f5T5DURi3rTZJm6/jXL3L50ClDQ7U3x:zCDr28gNlMS5RT5QobTZJmkjrSiQ7EaF
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.