General
- Target 86634393849aafb3c0cd725f3bef725e.exe
- Size 263KB
- Sample230703-j7t6dsff27
- SHA256 3c4d64e37a42d0857e3af2353d0d75554fbbb9d2e976312c6b1fbade7b711a3c
- MD5 86634393849aafb3c0cd725f3bef725e
- SHA1 96e9f90e4d6b0441e99b176b496b4a13f3b60a6c
- SHA512 87f2a823bf4b49a4ea751a7e5ea1cda3810f7c38f2dc40fa7eb03349219a566f4c008ee423d07127e521b0dfeb40add26e3b5475ff79c3f0ec41967fda3bcd81
- SSDEEP 3072:3TPb3kpq10pELAy5hVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW/Bpejxs:U010pEJIpLdC4t8yXzU7mQ0l5d
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
86634393849aafb3c0cd725f3bef725e.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
andre
C2
-
77.91.124.49:19073
Attributes
-
auth_value
8e5522dc6bdb7e288797bc46c2687b12
Targets
-
- Target 86634393849aafb3c0cd725f3bef725e.exe
- Size 263KB
- SHA256 3c4d64e37a42d0857e3af2353d0d75554fbbb9d2e976312c6b1fbade7b711a3c
- MD5 86634393849aafb3c0cd725f3bef725e
- SHA1 96e9f90e4d6b0441e99b176b496b4a13f3b60a6c
- SHA512 87f2a823bf4b49a4ea751a7e5ea1cda3810f7c38f2dc40fa7eb03349219a566f4c008ee423d07127e521b0dfeb40add26e3b5475ff79c3f0ec41967fda3bcd81
- SSDEEP 3072:3TPb3kpq10pELAy5hVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW/Bpejxs:U010pEJIpLdC4t8yXzU7mQ0l5d
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.