General
- Target cd82c261d81f1d75c1d71836c3925a44.exe
- Size 262KB
- Sample230702-jvdymscb4w
- SHA256 f7285ad7ff572dae4ff74ad9fcaaa72b7b21ebf49772c150e573eb6986fc95ca
- MD5 cd82c261d81f1d75c1d71836c3925a44
- SHA1 6d4a8382da670e34df8980676a29ff3526a66d37
- SHA512 0797b1a633ac593617403c18d4b843e78caebafc6de7b8ea4b017f2e29179a365526d87e76b8eae9775335dd0e8472ee292abb501b7691fe571895515548761f
- SSDEEP 3072:/snx956BtpVQgi4LM0aaOyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbR3sE:knxrd4LMjlzV6H+KHaDyXbbmIRf0VD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cd82c261d81f1d75c1d71836c3925a44.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target cd82c261d81f1d75c1d71836c3925a44.exe
- Size 262KB
- SHA256 f7285ad7ff572dae4ff74ad9fcaaa72b7b21ebf49772c150e573eb6986fc95ca
- MD5 cd82c261d81f1d75c1d71836c3925a44
- SHA1 6d4a8382da670e34df8980676a29ff3526a66d37
- SHA512 0797b1a633ac593617403c18d4b843e78caebafc6de7b8ea4b017f2e29179a365526d87e76b8eae9775335dd0e8472ee292abb501b7691fe571895515548761f
- SSDEEP 3072:/snx956BtpVQgi4LM0aaOyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbR3sE:knxrd4LMjlzV6H+KHaDyXbbmIRf0VD
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.