General
- Target 8aae30d4ac8d87bbc0f04e314229db4e.exe
- Size 1.3MB
- Sample230706-mchewsbd2t
- SHA256 d25fecc75a5a2670b5aa7397bbaaefff56a91bbfff107e05d44fd2167000390f
- MD5 8aae30d4ac8d87bbc0f04e314229db4e
- SHA1 6f1a933afb9e6c3a18b5e7c84871ebbcf38297d1
- SHA512 126c3afedcad164b9cadb4acc42287960fe5f84331b753c7859078d6bd30267b05419558de84fcbdae116db8b6dba64fcf75efa9ff068a28398f8f0f636cd9de
- SSDEEP 12288:L6aSZF+94P3ezcZ+whkMkqEt5+6Jili5RAjfrYwlth2rDBXWNN/HVUBnFUHXOtrt:2jaPgfU5G/fYuTORU/133iRrsgUP94
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8aae30d4ac8d87bbc0f04e314229db4e.exe
Resource
win7-20230703-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
furod
C2
-
77.91.68.70:19073
Attributes
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
- Target 8aae30d4ac8d87bbc0f04e314229db4e.exe
- Size 1.3MB
- SHA256 d25fecc75a5a2670b5aa7397bbaaefff56a91bbfff107e05d44fd2167000390f
- MD5 8aae30d4ac8d87bbc0f04e314229db4e
- SHA1 6f1a933afb9e6c3a18b5e7c84871ebbcf38297d1
- SHA512 126c3afedcad164b9cadb4acc42287960fe5f84331b753c7859078d6bd30267b05419558de84fcbdae116db8b6dba64fcf75efa9ff068a28398f8f0f636cd9de
- SSDEEP 12288:L6aSZF+94P3ezcZ+whkMkqEt5+6Jili5RAjfrYwlth2rDBXWNN/HVUBnFUHXOtrt:2jaPgfU5G/fYuTORU/133iRrsgUP94
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.