General
- Target 45e58684084bc69dea0079642afc5b9f.exe
- Size 1.3MB
- Sample230706-gnlnssha47
- SHA256 c2851981f6bfd01a243174df5ef1f49827232c866105e496e98b57f436f60108
- MD5 45e58684084bc69dea0079642afc5b9f
- SHA1 2fb661dc48762f6bf84dfd24a361104c6dfe8edd
- SHA512 7619a87fb680cb00bd52d2d762a1a146f9f230efc8f1d94fe691a8ca1152640d1f769314b146bc2233e0288d3ab17cf4194c34794b50172742c536efc050d1d2
- SSDEEP 24576:Zwi2dGfYU5xpaCozrddBehxOFEYjIj2l9Vu9Z:ZXg1CujB6AEYHPVg
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
45e58684084bc69dea0079642afc5b9f.exe
Resource
win7-20230703-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
furod
C2
-
77.91.68.70:19073
Attributes
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
- Target 45e58684084bc69dea0079642afc5b9f.exe
- Size 1.3MB
- SHA256 c2851981f6bfd01a243174df5ef1f49827232c866105e496e98b57f436f60108
- MD5 45e58684084bc69dea0079642afc5b9f
- SHA1 2fb661dc48762f6bf84dfd24a361104c6dfe8edd
- SHA512 7619a87fb680cb00bd52d2d762a1a146f9f230efc8f1d94fe691a8ca1152640d1f769314b146bc2233e0288d3ab17cf4194c34794b50172742c536efc050d1d2
- SSDEEP 24576:Zwi2dGfYU5xpaCozrddBehxOFEYjIj2l9Vu9Z:ZXg1CujB6AEYHPVg
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.