General
- Target 87e606e1bbed54aa55bbc7d2082aeb85.exe
- Size 275KB
- Sample230701-2ch4raba6s
- SHA256 72a7e2ce71216e56b5ebbf50f5d24c9de78f8fa5da8557126d7465a752fdd0d4
- MD5 87e606e1bbed54aa55bbc7d2082aeb85
- SHA1 de20602b03a0d989aa0afeff6f3db7fbf3a1a93f
- SHA512 218e9e7a004c0a9ee6360d889bd4b401ff3a892edccee03a8e577d67be3e7719626b451101ae644dbac53b0e426fdbcdc96e74ccfab829754c54c9b596b6b6fe
- SSDEEP 6144:9VFRj6fuAzV6H+KHaDyXbbmIRf0VqzQdQp:rPWfuQV6H+0aWLhBgcQdQp
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
87e606e1bbed54aa55bbc7d2082aeb85.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target 87e606e1bbed54aa55bbc7d2082aeb85.exe
- Size 275KB
- SHA256 72a7e2ce71216e56b5ebbf50f5d24c9de78f8fa5da8557126d7465a752fdd0d4
- MD5 87e606e1bbed54aa55bbc7d2082aeb85
- SHA1 de20602b03a0d989aa0afeff6f3db7fbf3a1a93f
- SHA512 218e9e7a004c0a9ee6360d889bd4b401ff3a892edccee03a8e577d67be3e7719626b451101ae644dbac53b0e426fdbcdc96e74ccfab829754c54c9b596b6b6fe
- SSDEEP 6144:9VFRj6fuAzV6H+KHaDyXbbmIRf0VqzQdQp:rPWfuQV6H+0aWLhBgcQdQp
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.