General
- Target ea42ba8ae02d92b2a5c7058b99ab65c3.exe
- Size 262KB
- Sample230702-mfczksbc23
- SHA256 eb506f946827d7b6ef8f2a1b08ce06bcddd476fc9785f1a1862783bfdec261be
- MD5 ea42ba8ae02d92b2a5c7058b99ab65c3
- SHA1 7135db1c417c44348044c1f8209dd09e80630d92
- SHA512 50e85294f7de639f8ba34131ef34468e9d3901f5e0fe1e0e27d5a12308f91094fd6c8a4f82531c400d4d38330862b28745801fa16596704d974d1a4c0fe14225
- SSDEEP 3072:C2ANebVB9pciGv4vxI/MyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbR2RpD:QhiRvxtzV6H+KHaDyXbbmIRf0VSn
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ea42ba8ae02d92b2a5c7058b99ab65c3.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target ea42ba8ae02d92b2a5c7058b99ab65c3.exe
- Size 262KB
- SHA256 eb506f946827d7b6ef8f2a1b08ce06bcddd476fc9785f1a1862783bfdec261be
- MD5 ea42ba8ae02d92b2a5c7058b99ab65c3
- SHA1 7135db1c417c44348044c1f8209dd09e80630d92
- SHA512 50e85294f7de639f8ba34131ef34468e9d3901f5e0fe1e0e27d5a12308f91094fd6c8a4f82531c400d4d38330862b28745801fa16596704d974d1a4c0fe14225
- SSDEEP 3072:C2ANebVB9pciGv4vxI/MyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbR2RpD:QhiRvxtzV6H+KHaDyXbbmIRf0VSn
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.