General
- Target f46f844ace4ec5938956dc8a3969147f.exe
- Size 1.3MB
- Sample230706-netrdabe8x
- SHA256 a70dcb6e63a36afa9d791fc45c9b5383b1f45a3589fccc9d7bb5ae1fcdf12b31
- MD5 f46f844ace4ec5938956dc8a3969147f
- SHA1 86c094d6ed60af2e4acad10e14d02a28066fadce
- SHA512 a2aa806789676464acb9601d7a3594312063d85d50aa7fd4d9058fbda4a3d48125e9da12b85c52c2e4638e5869be9ee022c7224d4d797c11e291598aff5a2350
- SSDEEP 24576:u/8t1MvGbfl9RD7UronbZXqiFsRa7lORqodaD:uUH+uflYrqNXTV7lORqR
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f46f844ace4ec5938956dc8a3969147f.exe
Resource
win7-20230705-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
furod
C2
-
77.91.68.70:19073
Attributes
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
- Target f46f844ace4ec5938956dc8a3969147f.exe
- Size 1.3MB
- SHA256 a70dcb6e63a36afa9d791fc45c9b5383b1f45a3589fccc9d7bb5ae1fcdf12b31
- MD5 f46f844ace4ec5938956dc8a3969147f
- SHA1 86c094d6ed60af2e4acad10e14d02a28066fadce
- SHA512 a2aa806789676464acb9601d7a3594312063d85d50aa7fd4d9058fbda4a3d48125e9da12b85c52c2e4638e5869be9ee022c7224d4d797c11e291598aff5a2350
- SSDEEP 24576:u/8t1MvGbfl9RD7UronbZXqiFsRa7lORqodaD:uUH+uflYrqNXTV7lORqR
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.