General
- Target 96fae142b8ce75a0504d1fd3ffbba668.exe
- Size 263KB
- Sample230618-clcwnaec9w
- SHA256 51f2d68eabfbeb31fc017b7a24f03db0a1c4e51a429cef54f16a4511c06ab820
- MD5 96fae142b8ce75a0504d1fd3ffbba668
- SHA1 a93e60ab5e9fc763310327988dbd45bfc7ef20f2
- SHA512 382ee4033a25e30687512bc0f4922450a72a84b57d0ed46339ae2210e722e0c42d78c53eb073e8044226353220c1a96736c5c7e9552951aee2c1f460686b6a0c
- SSDEEP 3072:rZ9Je3qdkKC4HrZKyieubmC1oPj7cmaRp7INH1Kr5w/Exlz1Qut0x:9eIkd40evC1oPsmaRp7INMrgExlzq
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
96fae142b8ce75a0504d1fd3ffbba668.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
jason
C2
-
83.97.73.129:19071
Attributes
-
auth_value
87d1dc01751f148e9bec02edc71c5d94
Targets
-
- Target 96fae142b8ce75a0504d1fd3ffbba668.exe
- Size 263KB
- SHA256 51f2d68eabfbeb31fc017b7a24f03db0a1c4e51a429cef54f16a4511c06ab820
- MD5 96fae142b8ce75a0504d1fd3ffbba668
- SHA1 a93e60ab5e9fc763310327988dbd45bfc7ef20f2
- SHA512 382ee4033a25e30687512bc0f4922450a72a84b57d0ed46339ae2210e722e0c42d78c53eb073e8044226353220c1a96736c5c7e9552951aee2c1f460686b6a0c
- SSDEEP 3072:rZ9Je3qdkKC4HrZKyieubmC1oPj7cmaRp7INH1Kr5w/Exlz1Qut0x:9eIkd40evC1oPsmaRp7INMrgExlzq
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.