General
- Target ea7a7f16a5265d2d2212141c3fac1d64.exe
- Size 262KB
- Sample230703-lkb3eahb4s
- SHA256 a2bd76a28833ba0bd1d5a790905d01d40665f359280d67deda71857ccf8699c5
- MD5 ea7a7f16a5265d2d2212141c3fac1d64
- SHA1 987191e4459144468d446b8cccdb6d374bd7a03d
- SHA512 77e6d9bc7a2f43c1c79e769e8faa5d6bac81fb31466d582f11901a18bd3c0f2e67b2c092a23108b8bbbbb3f21c0684c9336c4cdd8f627affeb2e8ea3d2ae44fc
- SSDEEP 6144:4X+jiDPr+U4QsuSTZrUDZsyXfj2aM7Y0+tD:4XbPrbsuSTZrUltvj2x0Hl
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ea7a7f16a5265d2d2212141c3fac1d64.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
nowa
C2
-
77.91.124.49:19073
Attributes
-
auth_value
6bc6b0617aa32bcd971aef4a2cf49647
Targets
-
- Target ea7a7f16a5265d2d2212141c3fac1d64.exe
- Size 262KB
- SHA256 a2bd76a28833ba0bd1d5a790905d01d40665f359280d67deda71857ccf8699c5
- MD5 ea7a7f16a5265d2d2212141c3fac1d64
- SHA1 987191e4459144468d446b8cccdb6d374bd7a03d
- SHA512 77e6d9bc7a2f43c1c79e769e8faa5d6bac81fb31466d582f11901a18bd3c0f2e67b2c092a23108b8bbbbb3f21c0684c9336c4cdd8f627affeb2e8ea3d2ae44fc
- SSDEEP 6144:4X+jiDPr+U4QsuSTZrUDZsyXfj2aM7Y0+tD:4XbPrbsuSTZrUltvj2x0Hl
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.