General
- Target ca1acc6b0b99dbb3d584c7dd454abbff.exe
- Size 262KB
- Sample230702-2w85aafa81
- SHA256 ac3348346b94c6369328e450df7a8d9d4b7b125b4e257f5ff3d363a2816857e2
- MD5 ca1acc6b0b99dbb3d584c7dd454abbff
- SHA1 e56659dfd981781b0fad6328772ce5d12c8a2a02
- SHA512 8c513b378bfbcac3bea8576bc6f69651e54b9e2b130f833f9875bc5fa1c8603e5924aa3275f715b1336c5f6785595d02089b03b6a836aa8537e30715baee2f8f
- SSDEEP 3072:+cXnfV/i6mrQgP4fBSZyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW/Gpeju:+cXnROQbfBpIpLdC4t8yXzU7mQ0lh+
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ca1acc6b0b99dbb3d584c7dd454abbff.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
andre
C2
-
77.91.124.49:19073
Attributes
-
auth_value
8e5522dc6bdb7e288797bc46c2687b12
Targets
-
- Target ca1acc6b0b99dbb3d584c7dd454abbff.exe
- Size 262KB
- SHA256 ac3348346b94c6369328e450df7a8d9d4b7b125b4e257f5ff3d363a2816857e2
- MD5 ca1acc6b0b99dbb3d584c7dd454abbff
- SHA1 e56659dfd981781b0fad6328772ce5d12c8a2a02
- SHA512 8c513b378bfbcac3bea8576bc6f69651e54b9e2b130f833f9875bc5fa1c8603e5924aa3275f715b1336c5f6785595d02089b03b6a836aa8537e30715baee2f8f
- SSDEEP 3072:+cXnfV/i6mrQgP4fBSZyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW/Gpeju:+cXnROQbfBpIpLdC4t8yXzU7mQ0lh+
- MD5 SHA1 SHA512 SSDEEP
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.