General
- Target 5a956caa79dd1e72f259eb4ccb945695.exe
- Size 303KB
- Sample220718-d22qdsacel
- SHA256 1de2bb52daa96e1d93066c13ae8eeb8301d7448f2b99612f2aeee62f055fa5e7
- MD5 5a956caa79dd1e72f259eb4ccb945695
- SHA1 95465c38b3fb1ec31a94c8b2efb825ee5e70eb42
- SHA512 44d13e542605a55bd1cad843988d8d704681d293d01fc069b4e38906b44c80309e332cda1df3a4ef2d8c56eb365c7bec7407e646f6149ecf7b5ac8b0387cf83a
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
5a956caa79dd1e72f259eb4ccb945695.exe
Resource
win7-20220414-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target 5a956caa79dd1e72f259eb4ccb945695.exe
- Size 303KB
- SHA256 1de2bb52daa96e1d93066c13ae8eeb8301d7448f2b99612f2aeee62f055fa5e7
- MD5 5a956caa79dd1e72f259eb4ccb945695
- SHA1 95465c38b3fb1ec31a94c8b2efb825ee5e70eb42
- SHA512 44d13e542605a55bd1cad843988d8d704681d293d01fc069b4e38906b44c80309e332cda1df3a4ef2d8c56eb365c7bec7407e646f6149ecf7b5ac8b0387cf83a
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.