General
- Target 15119d274c692c0f4959aa1181c615fb.exe
- Size 273KB
- Sample230620-hgcb8aae56
- SHA256 8f29df372ea828f3a52b2f89d3b158fc55590d76641d4c64277c9a97006c9ac6
- MD5 15119d274c692c0f4959aa1181c615fb
- SHA1 55d0df941350d2f38a10118cc022dda572da8dfe
- SHA512 cb58ff6df7e8541fb0013c6bff48ddd404c04bcbc66f2f8e4077296dfca4653825e31854a98daeb7f226460cebcce494a7835a15bef24f8beabb2e0c54249aa6
- SSDEEP 6144:1aqMeD20Q0FKHgKNRBH13TLxNP9T0x+SRMt:1weVQzgMLxNFYv
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
15119d274c692c0f4959aa1181c615fb.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
furga
C2
-
83.97.73.128:19071
Attributes
-
auth_value
1b7af6db7a79a3475798fcf494818be7
Targets
-
- Target 15119d274c692c0f4959aa1181c615fb.exe
- Size 273KB
- SHA256 8f29df372ea828f3a52b2f89d3b158fc55590d76641d4c64277c9a97006c9ac6
- MD5 15119d274c692c0f4959aa1181c615fb
- SHA1 55d0df941350d2f38a10118cc022dda572da8dfe
- SHA512 cb58ff6df7e8541fb0013c6bff48ddd404c04bcbc66f2f8e4077296dfca4653825e31854a98daeb7f226460cebcce494a7835a15bef24f8beabb2e0c54249aa6
- SSDEEP 6144:1aqMeD20Q0FKHgKNRBH13TLxNP9T0x+SRMt:1weVQzgMLxNFYv
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.