General
- Target 2c67dec76ab1419639abb9c4a96b8d62bcd9e0032896e.exe
- Size 340KB
- Sample220707-23da7ahfe4
- SHA256 2c67dec76ab1419639abb9c4a96b8d62bcd9e0032896ed46b776d0fd2bc51276
- MD5 159170c2e7062723d8d36a02a46bcd04
- SHA1 7be603921bd6c909c44e8262b44728aa66ac79a7
- SHA512 3195a1f4ee9fde1148bff3d9b1951c4715649f92e9cfa2d19d0975fb0efee86f8a8e91688b521e4042a16b85413182557178633fd25427e314731e243278694f
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
2c67dec76ab1419639abb9c4a96b8d62bcd9e0032896e.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
tsmc
C2
-
tsmctracking.pro:80
Attributes
-
auth_value
06ff000252c39147f1065ec0a7c9f047
Targets
-
- Target 2c67dec76ab1419639abb9c4a96b8d62bcd9e0032896e.exe
- Size 340KB
- SHA256 2c67dec76ab1419639abb9c4a96b8d62bcd9e0032896ed46b776d0fd2bc51276
- MD5 159170c2e7062723d8d36a02a46bcd04
- SHA1 7be603921bd6c909c44e8262b44728aa66ac79a7
- SHA512 3195a1f4ee9fde1148bff3d9b1951c4715649f92e9cfa2d19d0975fb0efee86f8a8e91688b521e4042a16b85413182557178633fd25427e314731e243278694f
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.