General
- Target a7c3d0332a3d46a9fb6c698154ad4773.exe
- Size 1.3MB
- Sample230706-mpymmsbd6v
- SHA256 d95b58bf1483ee10be16e8826b500017b629aa8eeff941b8a3a534b6a9abaed0
- MD5 a7c3d0332a3d46a9fb6c698154ad4773
- SHA1 a464b6802afcbfb5d856ca6824ebd8b733464d04
- SHA512 54d5e1159f59a1d1796693be5a9d1e30d98629d67086fe4e4ef7105c0f7ed9394f3d48c14bc20639997fd0086f447154a5b4948a7cd23b76bfd1246d91144618
- SSDEEP 24576:zZi2dGfYU5xpaCozrddBehxOFEYjIj2l9VueK:z6g1CujB6AEYHPV5K
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a7c3d0332a3d46a9fb6c698154ad4773.exe
Resource
win7-20230705-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
furod
C2
-
77.91.68.70:19073
Attributes
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
- Target a7c3d0332a3d46a9fb6c698154ad4773.exe
- Size 1.3MB
- SHA256 d95b58bf1483ee10be16e8826b500017b629aa8eeff941b8a3a534b6a9abaed0
- MD5 a7c3d0332a3d46a9fb6c698154ad4773
- SHA1 a464b6802afcbfb5d856ca6824ebd8b733464d04
- SHA512 54d5e1159f59a1d1796693be5a9d1e30d98629d67086fe4e4ef7105c0f7ed9394f3d48c14bc20639997fd0086f447154a5b4948a7cd23b76bfd1246d91144618
- SSDEEP 24576:zZi2dGfYU5xpaCozrddBehxOFEYjIj2l9VueK:z6g1CujB6AEYHPV5K
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.