General
- Target 281499169b25ba8d2058dfdca70ae05f.exe
- Size 262KB
- Sample230702-qech7sbf75
- SHA256 e85dac3cec39b116d458adf891f703fc805d3e360f3d0b65f707b0103f9bf5c6
- MD5 281499169b25ba8d2058dfdca70ae05f
- SHA1 357108e6a161bb324f082e26dea2e9cdfe5ef9f3
- SHA512 18d0fa28188c077d2bd7e406ccf21aae70bfe51f6b83c7e389ad2e5bfa06e50e58853b53f375618a1eb210e43ce4e83e656c60870e8e09312257dfdeff01c7a9
- SSDEEP 3072:6J2hNclh9ZUuWA4bZEtyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbRulcp7:3RuobZAzV6H+KHaDyXbbmIRf0Vay
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
281499169b25ba8d2058dfdca70ae05f.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bruno
C2
-
83.97.73.134:19071
Attributes
-
auth_value
b23e240c277e85ce9d49d6165c0a2b48
Targets
-
- Target 281499169b25ba8d2058dfdca70ae05f.exe
- Size 262KB
- SHA256 e85dac3cec39b116d458adf891f703fc805d3e360f3d0b65f707b0103f9bf5c6
- MD5 281499169b25ba8d2058dfdca70ae05f
- SHA1 357108e6a161bb324f082e26dea2e9cdfe5ef9f3
- SHA512 18d0fa28188c077d2bd7e406ccf21aae70bfe51f6b83c7e389ad2e5bfa06e50e58853b53f375618a1eb210e43ce4e83e656c60870e8e09312257dfdeff01c7a9
- SSDEEP 3072:6J2hNclh9ZUuWA4bZEtyTFqvPXTTR6H+KH4DDyXAjqpRm7MRTr5yOauYrbRulcp7:3RuobZAzV6H+KHaDyXbbmIRf0Vay
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.