General
- Target 070afd89d22d4908fcdb596be674b7f3.exe
- Size 262KB
- Sample230702-2pyd7sfa6x
- SHA256 985d283893420653ea3bd3e7a02b9cf3b5ffdd2514e7bceed862ca95f6cab31d
- MD5 070afd89d22d4908fcdb596be674b7f3
- SHA1 e8f00580864127a45ffcb43544fdd140ad8b489a
- SHA512 7b50aeb4757cbd4495a760f337ca3b914dddf380e5471e57f6d527eac4a9f8946463007267df4d975ba2ab6f8ec1d9b41e4db3d590e43b6b7ccf4957ae3ca6a9
- SSDEEP 3072:zgYSkekbTgA46RpzeyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWvmpejxk:TSkeyTK6RtIpLdC4t8yXzU7mQ0lxe
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
070afd89d22d4908fcdb596be674b7f3.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
andre
C2
-
77.91.124.49:19073
Attributes
-
auth_value
8e5522dc6bdb7e288797bc46c2687b12
Targets
-
- Target 070afd89d22d4908fcdb596be674b7f3.exe
- Size 262KB
- SHA256 985d283893420653ea3bd3e7a02b9cf3b5ffdd2514e7bceed862ca95f6cab31d
- MD5 070afd89d22d4908fcdb596be674b7f3
- SHA1 e8f00580864127a45ffcb43544fdd140ad8b489a
- SHA512 7b50aeb4757cbd4495a760f337ca3b914dddf380e5471e57f6d527eac4a9f8946463007267df4d975ba2ab6f8ec1d9b41e4db3d590e43b6b7ccf4957ae3ca6a9
- SSDEEP 3072:zgYSkekbTgA46RpzeyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWvmpejxk:TSkeyTK6RtIpLdC4t8yXzU7mQ0lxe
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.