General
-
Target
4D4F6211FB491EB9EA6009DB1053657D9B4FD7CBAE4D8.exe
-
Size
296KB
-
Sample
240421-n31jtsba71
-
MD5
8279f809e29bd79218d79f4b8f02039f
-
SHA1
2112625658098e14bacee7a7cc8156350f51a293
-
SHA256
4d4f6211fb491eb9ea6009db1053657d9b4fd7cbae4d8513bb7b9e228683d696
-
SHA512
f359e47827fc741c9f15f5146476f63795370a3458da9be34a874ca8c021bfa4dfdc13786b7f6cc360bbbe82998f7467f1bd38f86bdcf0661233a8821b41f61f
-
SSDEEP
3072:rWq8+MBKe2BtoC9DfyguBewym2qzZze1zNcZqf7D34deqiOLCbBO3:rthMBKe2fzay6zZy7cZqf7DInL
Behavioral task
behavioral1
Sample
4D4F6211FB491EB9EA6009DB1053657D9B4FD7CBAE4D8.exe
Resource
win7-20240221-en
Malware Config
Extracted
redline
@oleh_psp
185.172.128.33:8970
Targets
-
-
Target
4D4F6211FB491EB9EA6009DB1053657D9B4FD7CBAE4D8.exe
-
Size
296KB
-
MD5
8279f809e29bd79218d79f4b8f02039f
-
SHA1
2112625658098e14bacee7a7cc8156350f51a293
-
SHA256
4d4f6211fb491eb9ea6009db1053657d9b4fd7cbae4d8513bb7b9e228683d696
-
SHA512
f359e47827fc741c9f15f5146476f63795370a3458da9be34a874ca8c021bfa4dfdc13786b7f6cc360bbbe82998f7467f1bd38f86bdcf0661233a8821b41f61f
-
SSDEEP
3072:rWq8+MBKe2BtoC9DfyguBewym2qzZze1zNcZqf7D34deqiOLCbBO3:rthMBKe2fzay6zZy7cZqf7DInL
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-