General
- Target da7648910a0e94b13945c668b2fbdb94.exe
- Size 262KB
- Sample230702-msvp6acd4s
- SHA256 632ab4d6a6c4dcedd0791c9a6575bf4caf3d5c7c6e6544ab02698e9b9b4fd56d
- MD5 da7648910a0e94b13945c668b2fbdb94
- SHA1 f2562e3661ea9772045cebb536989679493afa78
- SHA512 70656c8608f8b3a1fa6604ad3181d90a34bd9ea25368c4d4d4703764ff43cc12b11a8ec00f84a892294bf910f96bc342937993a80cd63a23161a76a2d733b6d6
- SSDEEP 3072:DFJtxKQQYqGM14+j0gqyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbRWUpeS:+3Bk+jZEzV6H+KHaDyXbbmIRf0Vyw
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
da7648910a0e94b13945c668b2fbdb94.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target da7648910a0e94b13945c668b2fbdb94.exe
- Size 262KB
- SHA256 632ab4d6a6c4dcedd0791c9a6575bf4caf3d5c7c6e6544ab02698e9b9b4fd56d
- MD5 da7648910a0e94b13945c668b2fbdb94
- SHA1 f2562e3661ea9772045cebb536989679493afa78
- SHA512 70656c8608f8b3a1fa6604ad3181d90a34bd9ea25368c4d4d4703764ff43cc12b11a8ec00f84a892294bf910f96bc342937993a80cd63a23161a76a2d733b6d6
- SSDEEP 3072:DFJtxKQQYqGM14+j0gqyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbRWUpeS:+3Bk+jZEzV6H+KHaDyXbbmIRf0Vyw
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.