General
- Target b3158ff7a9151c71ee76f8ee7b14f803.exe
- Size 406KB
- Sample220716-yrj3taegdn
- SHA256 02368643b60836699bcb411c99e2128e28101dddb0b0abaa50c780472e8ba083
- MD5 b3158ff7a9151c71ee76f8ee7b14f803
- SHA1 159e7b628f7803e16de54524af0126e8593c7527
- SHA512 c82fccad7e0980411d03fe34f3e930cb7b3a7343711a90805d835ef1cf4b26832315f707dfe04494c5a9acafa9aec992494513a4d2f07e0dc053b09375b423e1
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
b3158ff7a9151c71ee76f8ee7b14f803.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target b3158ff7a9151c71ee76f8ee7b14f803.exe
- Size 406KB
- SHA256 02368643b60836699bcb411c99e2128e28101dddb0b0abaa50c780472e8ba083
- MD5 b3158ff7a9151c71ee76f8ee7b14f803
- SHA1 159e7b628f7803e16de54524af0126e8593c7527
- SHA512 c82fccad7e0980411d03fe34f3e930cb7b3a7343711a90805d835ef1cf4b26832315f707dfe04494c5a9acafa9aec992494513a4d2f07e0dc053b09375b423e1
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.