General
- Target f7ee836a1595928d59447adaacdf58ba.exe
- Size 275KB
- Sample230702-b74qtsac47
- SHA256 980afe0273520aadf09209d0bfd1e8a7fe3a5a9c5de2b56f8577bd7f6942cccb
- MD5 f7ee836a1595928d59447adaacdf58ba
- SHA1 115c6b75861fd81f946c2b1ae15ede3906fa483d
- SHA512 e0ed2d691678d16223b696666ceef36b6c2242934d7607b5d20bcd98feb3a51cdcd5fcde74efe1d4c458c6f388146029095099fd652e99b2c0816323e77dafa6
- SSDEEP 6144:79TCXjy8gJ26zV6H+KHaDyXbbmIRf0VS3QdQb:7ie8g8eV6H+0aWLhBg4QdQb
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
f7ee836a1595928d59447adaacdf58ba.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target f7ee836a1595928d59447adaacdf58ba.exe
- Size 275KB
- SHA256 980afe0273520aadf09209d0bfd1e8a7fe3a5a9c5de2b56f8577bd7f6942cccb
- MD5 f7ee836a1595928d59447adaacdf58ba
- SHA1 115c6b75861fd81f946c2b1ae15ede3906fa483d
- SHA512 e0ed2d691678d16223b696666ceef36b6c2242934d7607b5d20bcd98feb3a51cdcd5fcde74efe1d4c458c6f388146029095099fd652e99b2c0816323e77dafa6
- SSDEEP 6144:79TCXjy8gJ26zV6H+KHaDyXbbmIRf0VS3QdQb:7ie8g8eV6H+0aWLhBg4QdQb
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.