General
- Target 04e0a576e17bb6d0b2a1f64dbb05079b.exe
- Size 276KB
- Sample230702-d627qabf5x
- SHA256 261d6ff8839b54cf3be9ca815be4e4d0e2eaf8bc2b830547110e7c55059c2e5e
- MD5 04e0a576e17bb6d0b2a1f64dbb05079b
- SHA1 8d6837e952bbc9224dede2456535399d6639a2af
- SHA512 c3742e43eaa17802df67806882c321ed9f99ae58283ead668bb6787f2f30b6140204f79867c744d74335e9439493aaf7c5ab2ec570c28f6205528f4bc6d8c461
- SSDEEP 6144:Y5vhOC64kTzV6H+KHaDyXbbmIRf0VqFQdQb:Y58P4kXV6H+0aWLhBgmQdQb
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
04e0a576e17bb6d0b2a1f64dbb05079b.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target 04e0a576e17bb6d0b2a1f64dbb05079b.exe
- Size 276KB
- SHA256 261d6ff8839b54cf3be9ca815be4e4d0e2eaf8bc2b830547110e7c55059c2e5e
- MD5 04e0a576e17bb6d0b2a1f64dbb05079b
- SHA1 8d6837e952bbc9224dede2456535399d6639a2af
- SHA512 c3742e43eaa17802df67806882c321ed9f99ae58283ead668bb6787f2f30b6140204f79867c744d74335e9439493aaf7c5ab2ec570c28f6205528f4bc6d8c461
- SSDEEP 6144:Y5vhOC64kTzV6H+KHaDyXbbmIRf0VqFQdQb:Y58P4kXV6H+0aWLhBgmQdQb
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.