General
- Target f7ba91ce01834f75665ac9d26d6e1c23.exe
- Size 275KB
- Sample230702-dqq5hsad97
- SHA256 fafb0559ae554e70c8490aa0dd3a9ce42f753df72d7b757142cb3f0085592ec5
- MD5 f7ba91ce01834f75665ac9d26d6e1c23
- SHA1 e1362d0d2b40120ddbe231f7b808c418806567b2
- SHA512 d3b43243a880161e071d153a8ae22ed9ec72e28a3de60a46d119debc81372471053b94851c6ab960708af23c6ecb6f0bfb5438d53a76114485814781801fd4b0
- SSDEEP 6144:ahEU2yfZ6ozV6H+KHaDyXbbmIRf0VywQdQb:MbfZlV6H+0aWLhBgHQdQb
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
f7ba91ce01834f75665ac9d26d6e1c23.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target f7ba91ce01834f75665ac9d26d6e1c23.exe
- Size 275KB
- SHA256 fafb0559ae554e70c8490aa0dd3a9ce42f753df72d7b757142cb3f0085592ec5
- MD5 f7ba91ce01834f75665ac9d26d6e1c23
- SHA1 e1362d0d2b40120ddbe231f7b808c418806567b2
- SHA512 d3b43243a880161e071d153a8ae22ed9ec72e28a3de60a46d119debc81372471053b94851c6ab960708af23c6ecb6f0bfb5438d53a76114485814781801fd4b0
- SSDEEP 6144:ahEU2yfZ6ozV6H+KHaDyXbbmIRf0VywQdQb:MbfZlV6H+0aWLhBgHQdQb
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.