General
- Target 77adf0cd6f61ad77a57b0068eb1b1fde.exe
- Size 405KB
- Sample220717-c3lj5acea8
- SHA256 13b835381d579df8054a1e3bc90cea02c9258f577d2196f0eeae9aec3c3a0fc3
- MD5 77adf0cd6f61ad77a57b0068eb1b1fde
- SHA1 e259945025c7a83c0719cd9e62a612b42f6b7f7c
- SHA512 e07af858a8c956b6d7ba58fec78227d8f64da671e624820dbe39fbd83b7c910ddc173a974dd6bbd56bcde2483e7eddcfa3b665c52906a48dc01c8823064ad05b
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
77adf0cd6f61ad77a57b0068eb1b1fde.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target 77adf0cd6f61ad77a57b0068eb1b1fde.exe
- Size 405KB
- SHA256 13b835381d579df8054a1e3bc90cea02c9258f577d2196f0eeae9aec3c3a0fc3
- MD5 77adf0cd6f61ad77a57b0068eb1b1fde
- SHA1 e259945025c7a83c0719cd9e62a612b42f6b7f7c
- SHA512 e07af858a8c956b6d7ba58fec78227d8f64da671e624820dbe39fbd83b7c910ddc173a974dd6bbd56bcde2483e7eddcfa3b665c52906a48dc01c8823064ad05b
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.