General
- Target c8fb1e6503d4210d854068a402d9cd95.exe
- Size 262KB
- Sample230703-e6khcafh9y
- SHA256 65b4cf6876450de3c9a2ec936b5cecfdd61f76de1906cfe57e53dab0b6557488
- MD5 c8fb1e6503d4210d854068a402d9cd95
- SHA1 9b965259f0afa836279d75f333d84d8f8d546b56
- SHA512 852461ae252c447179a8134006d088e75c1247234e502ff44524f9f48db98dcc7c5c5c671bd17043fb9369f7b630ba5bdd60ac4e271a4e23caa0709fc55d3888
- SSDEEP 3072:QwmZ1Rt/z2g4qjIDyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWv3pejxk:QwIzMqjpIpLdC4t8yXzU7mQ0lp5
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c8fb1e6503d4210d854068a402d9cd95.exe
Resource
win7-20230621-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
andre
C2
-
77.91.124.49:19073
Attributes
-
auth_value
8e5522dc6bdb7e288797bc46c2687b12
Targets
-
- Target c8fb1e6503d4210d854068a402d9cd95.exe
- Size 262KB
- SHA256 65b4cf6876450de3c9a2ec936b5cecfdd61f76de1906cfe57e53dab0b6557488
- MD5 c8fb1e6503d4210d854068a402d9cd95
- SHA1 9b965259f0afa836279d75f333d84d8f8d546b56
- SHA512 852461ae252c447179a8134006d088e75c1247234e502ff44524f9f48db98dcc7c5c5c671bd17043fb9369f7b630ba5bdd60ac4e271a4e23caa0709fc55d3888
- SSDEEP 3072:QwmZ1Rt/z2g4qjIDyJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWWv3pejxk:QwIzMqjpIpLdC4t8yXzU7mQ0lp5
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.