General
- Target fa0d9686ef69c326433bc7f9ea1237ac.exe
- Size 262KB
- Sample230702-pv673scf8s
- SHA256 9e673222714fca80003ea57aeea2b8a825788560e05ec19a7dae007b217a49d0
- MD5 fa0d9686ef69c326433bc7f9ea1237ac
- SHA1 eab02ab6dcd1e8a05f44b414f086514ff0df0cc3
- SHA512 09f65219c20331a7cff3662baf62c8743bef11348a2bc31f2c4e72460e01b285f7e18f2b0ced49722faf8cabdad066af8559fda20e4e75cd2b1217de50fd739b
- SSDEEP 3072:fsEJFxtf1Gq4IcsRMZyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbRmXpeju:fs+1aIcsOzV6H+KHaDyXbbmIRf0VCZ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fa0d9686ef69c326433bc7f9ea1237ac.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target fa0d9686ef69c326433bc7f9ea1237ac.exe
- Size 262KB
- SHA256 9e673222714fca80003ea57aeea2b8a825788560e05ec19a7dae007b217a49d0
- MD5 fa0d9686ef69c326433bc7f9ea1237ac
- SHA1 eab02ab6dcd1e8a05f44b414f086514ff0df0cc3
- SHA512 09f65219c20331a7cff3662baf62c8743bef11348a2bc31f2c4e72460e01b285f7e18f2b0ced49722faf8cabdad066af8559fda20e4e75cd2b1217de50fd739b
- SSDEEP 3072:fsEJFxtf1Gq4IcsRMZyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbRmXpeju:fs+1aIcsOzV6H+KHaDyXbbmIRf0VCZ
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.