General
- Target 664bcb63717626f0f7659ce58b952a3d.exe
- Size 263KB
- Sample230703-ak2saafc8t
- SHA256 c1d5cead615d2403e7159ee0671fb550bb2e053a1a50e97c9f9d4cbbf1948b56
- MD5 664bcb63717626f0f7659ce58b952a3d
- SHA1 269d5df50974348b8106787e1a901bdcec646a3c
- SHA512 7264ec2662727bff2bdaffbc75f3753730d10e68b4b81b6e5d0e39584b1e569d36cd50ef7aec92672fc7716ddeb39f52d85f5cdaa515d203c26c8e536c74bcf1
- SSDEEP 3072:xJ2Z8K1hdp1kT9Z9tHcFlesvy5hVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWJ:ekT99HcFlmIpLdC4t8yXzU7mQ0lRJ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
664bcb63717626f0f7659ce58b952a3d.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
andre
C2
-
77.91.124.49:19073
Attributes
-
auth_value
8e5522dc6bdb7e288797bc46c2687b12
Targets
-
- Target 664bcb63717626f0f7659ce58b952a3d.exe
- Size 263KB
- SHA256 c1d5cead615d2403e7159ee0671fb550bb2e053a1a50e97c9f9d4cbbf1948b56
- MD5 664bcb63717626f0f7659ce58b952a3d
- SHA1 269d5df50974348b8106787e1a901bdcec646a3c
- SHA512 7264ec2662727bff2bdaffbc75f3753730d10e68b4b81b6e5d0e39584b1e569d36cd50ef7aec92672fc7716ddeb39f52d85f5cdaa515d203c26c8e536c74bcf1
- SSDEEP 3072:xJ2Z8K1hdp1kT9Z9tHcFlesvy5hVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWJ:ekT99HcFlmIpLdC4t8yXzU7mQ0lRJ
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.