General
- Target f636b387f1d3c74b796dfbcbd79059ef.exe
- Size 262KB
- Sample230703-b4865sec93
- SHA256 c2d4b73002bf0cfccf4c1b72528081540bd31e3f87c8e4e571bb7a302082ddb9
- MD5 f636b387f1d3c74b796dfbcbd79059ef
- SHA1 49809d23f6650a91fc5c78f8fc478955d843ed91
- SHA512 ed39f366334f1ff11d48b3c3ed16701e2fc35bf31aebaf5aa04a080b2ad55f9168347672daa34717196e1e7862b8b1fb5155c2dfb4bc624a5efe5ec5c7857601
- SSDEEP 3072:d0tc3gW4agBzVyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWvapejxs:d0tc34agKIpLdC4t8yXzU7mQ0lxm
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f636b387f1d3c74b796dfbcbd79059ef.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
andre
C2
-
77.91.124.49:19073
Attributes
-
auth_value
8e5522dc6bdb7e288797bc46c2687b12
Targets
-
- Target f636b387f1d3c74b796dfbcbd79059ef.exe
- Size 262KB
- SHA256 c2d4b73002bf0cfccf4c1b72528081540bd31e3f87c8e4e571bb7a302082ddb9
- MD5 f636b387f1d3c74b796dfbcbd79059ef
- SHA1 49809d23f6650a91fc5c78f8fc478955d843ed91
- SHA512 ed39f366334f1ff11d48b3c3ed16701e2fc35bf31aebaf5aa04a080b2ad55f9168347672daa34717196e1e7862b8b1fb5155c2dfb4bc624a5efe5ec5c7857601
- SSDEEP 3072:d0tc3gW4agBzVyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWvapejxs:d0tc34agKIpLdC4t8yXzU7mQ0lxm
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.