General
- Target 0c1f8a0da5e4328811c926900e9d8de5.exe
- Size 276KB
- Sample230702-a72qssab48
- SHA256 0e8341bb96a44f60ca1cc2a68d7fd0c8cc93430c6f25b86ad2aa6e027f3cc32f
- MD5 0c1f8a0da5e4328811c926900e9d8de5
- SHA1 04386290090743f7e59b474d181049761145b633
- SHA512 0b78018c46a96ddd6c23fb8e0b8bfe296b90ebc973d336170b2b8f8859f685adf0f8db455e14ea69d440b1a1cc223332f79be6c8438d11dcd70b152374a8443b
- SSDEEP 6144:Ca/rXkcr6RzV6H+KHaDyXbbmIRf0Vy9QdQp:9Tr6BV6H+0aWLhBgeQdQp
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
0c1f8a0da5e4328811c926900e9d8de5.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target 0c1f8a0da5e4328811c926900e9d8de5.exe
- Size 276KB
- SHA256 0e8341bb96a44f60ca1cc2a68d7fd0c8cc93430c6f25b86ad2aa6e027f3cc32f
- MD5 0c1f8a0da5e4328811c926900e9d8de5
- SHA1 04386290090743f7e59b474d181049761145b633
- SHA512 0b78018c46a96ddd6c23fb8e0b8bfe296b90ebc973d336170b2b8f8859f685adf0f8db455e14ea69d440b1a1cc223332f79be6c8438d11dcd70b152374a8443b
- SSDEEP 6144:Ca/rXkcr6RzV6H+KHaDyXbbmIRf0Vy9QdQp:9Tr6BV6H+0aWLhBgeQdQp
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.