General
- Target 2be29a9777a5679bf474bf370a397b3e.exe
- Size 406KB
- Sample220716-t64zbachf7
- SHA256 df3865cb8587b8a226b80d18217edf02298648d2dc77c36299d2e9a4d4ad58c8
- MD5 2be29a9777a5679bf474bf370a397b3e
- SHA1 e17e29307682e367147a82f92bfb1ee7c7b843a2
- SHA512 e4a294547150d36c721c878118b926f2f6582847701e014fa85d24c3003b36533616f239cf52a484b9aa3510135d934b444a7cfb79652a8d412af8b591f63250
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
2be29a9777a5679bf474bf370a397b3e.exe
Resource
win7-20220414-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target 2be29a9777a5679bf474bf370a397b3e.exe
- Size 406KB
- SHA256 df3865cb8587b8a226b80d18217edf02298648d2dc77c36299d2e9a4d4ad58c8
- MD5 2be29a9777a5679bf474bf370a397b3e
- SHA1 e17e29307682e367147a82f92bfb1ee7c7b843a2
- SHA512 e4a294547150d36c721c878118b926f2f6582847701e014fa85d24c3003b36533616f239cf52a484b9aa3510135d934b444a7cfb79652a8d412af8b591f63250
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.