General
- Target 628f69b97d44caa07e105d5f14eeca34.exe
- Size 262KB
- Sample230702-x2nnbadc33
- SHA256 3d28c96ac1c85a5e79b3309d2de3ba9bbf950e5f67125ec018e3d324250dfd8e
- MD5 628f69b97d44caa07e105d5f14eeca34
- SHA1 f161331bbf5a66ea6be8a645093ad7e121473e91
- SHA512 6081f11a5453c56e742552b041a2ab0247dcdd4b86a57c5eddc67c05e25334464126004568f30d69eb681c45fc7ddbf9406b89252e9711c5aeeb3248b993e653
- SSDEEP 3072:R26xjxMWw4cLcFwyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW/Rpejxk:RLxM4cLmIpLdC4t8yXzU7mQ0lZ/
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
628f69b97d44caa07e105d5f14eeca34.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
andre
C2
-
77.91.124.49:19073
Attributes
-
auth_value
8e5522dc6bdb7e288797bc46c2687b12
Targets
-
- Target 628f69b97d44caa07e105d5f14eeca34.exe
- Size 262KB
- SHA256 3d28c96ac1c85a5e79b3309d2de3ba9bbf950e5f67125ec018e3d324250dfd8e
- MD5 628f69b97d44caa07e105d5f14eeca34
- SHA1 f161331bbf5a66ea6be8a645093ad7e121473e91
- SHA512 6081f11a5453c56e742552b041a2ab0247dcdd4b86a57c5eddc67c05e25334464126004568f30d69eb681c45fc7ddbf9406b89252e9711c5aeeb3248b993e653
- SSDEEP 3072:R26xjxMWw4cLcFwyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW/Rpejxk:RLxM4cLmIpLdC4t8yXzU7mQ0lZ/
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.