General
- Target 92a1af1acb1b6a93d4436f976cfac00a.exe
- Size 430KB
- Sample220708-hcwv3addek
- SHA256 4794d682adf23fec5f738cc3477c955eba198be11ebcd98560064d7b7d7424af
- MD5 92a1af1acb1b6a93d4436f976cfac00a
- SHA1 3e778c2da135fef3912025d04701fc9c460ee0d5
- SHA512 5e206fbc190b8883bc1bd3ef63ca1741dc9b765e8476f2d1bfee1e800156129f3dbdd7bc984d9bc8a7d5d3e0ca08ed16c4419af923e00304b49325ff0165a6f1
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
92a1af1acb1b6a93d4436f976cfac00a.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
tsmc
C2
-
tsmctracking.pro:80
Attributes
-
auth_value
06ff000252c39147f1065ec0a7c9f047
Targets
-
- Target 92a1af1acb1b6a93d4436f976cfac00a.exe
- Size 430KB
- SHA256 4794d682adf23fec5f738cc3477c955eba198be11ebcd98560064d7b7d7424af
- MD5 92a1af1acb1b6a93d4436f976cfac00a
- SHA1 3e778c2da135fef3912025d04701fc9c460ee0d5
- SHA512 5e206fbc190b8883bc1bd3ef63ca1741dc9b765e8476f2d1bfee1e800156129f3dbdd7bc984d9bc8a7d5d3e0ca08ed16c4419af923e00304b49325ff0165a6f1
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.