General
- Target 55d8f915322f6a4e50cdd85f413eff20.exe
- Size 262KB
- Sample230703-kgetfsgh6x
- SHA256 0b720a550461df21e82b5629d9aaafc1c9aaa11db1a58a317dfc65367232c79d
- MD5 55d8f915322f6a4e50cdd85f413eff20
- SHA1 cf39f28d92d1b0f9c1918a0d3f7a919dd288ba7e
- SHA512 4a6218ff7b046be8e30b83052b9e9755a0da09323978e917fc53a798b639017b527348fe55287c8778ca4772c61a420d34ddc836b389b4b43696540a6b0ccbdb
- SSDEEP 3072:tO6kcf73tTGV4vLJ36GyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWXZpeja:0PQTTvLmIpLdC4t8yXzU7mQ0lBt
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
55d8f915322f6a4e50cdd85f413eff20.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
andre
C2
-
77.91.124.49:19073
Attributes
-
auth_value
8e5522dc6bdb7e288797bc46c2687b12
Targets
-
- Target 55d8f915322f6a4e50cdd85f413eff20.exe
- Size 262KB
- SHA256 0b720a550461df21e82b5629d9aaafc1c9aaa11db1a58a317dfc65367232c79d
- MD5 55d8f915322f6a4e50cdd85f413eff20
- SHA1 cf39f28d92d1b0f9c1918a0d3f7a919dd288ba7e
- SHA512 4a6218ff7b046be8e30b83052b9e9755a0da09323978e917fc53a798b639017b527348fe55287c8778ca4772c61a420d34ddc836b389b4b43696540a6b0ccbdb
- SSDEEP 3072:tO6kcf73tTGV4vLJ36GyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWXZpeja:0PQTTvLmIpLdC4t8yXzU7mQ0lBt
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.