General
- Target 22fe93690fc33c0d1f0be4889920d23c.exe
- Size 393KB
- Sample220719-pwrh1scbd3
- SHA256 19430037ceba09a0de4bf071702ec6a66f899090d545fe977ae73d017d44c0a6
- MD5 22fe93690fc33c0d1f0be4889920d23c
- SHA1 e9fc679e755dd123efa2c502939bb29289e85236
- SHA512 bc9e97bdc045e3106031d57bb7d84782612394b6430bcd1330ffd9455c429b81e7d4a80305c20c052fa2191ab86999e0e01d7f2909f18e3f5c2e26ab27dc7d28
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
22fe93690fc33c0d1f0be4889920d23c.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target 22fe93690fc33c0d1f0be4889920d23c.exe
- Size 393KB
- SHA256 19430037ceba09a0de4bf071702ec6a66f899090d545fe977ae73d017d44c0a6
- MD5 22fe93690fc33c0d1f0be4889920d23c
- SHA1 e9fc679e755dd123efa2c502939bb29289e85236
- SHA512 bc9e97bdc045e3106031d57bb7d84782612394b6430bcd1330ffd9455c429b81e7d4a80305c20c052fa2191ab86999e0e01d7f2909f18e3f5c2e26ab27dc7d28
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.