General
- Target 8078f3748972daa35b333ffef41fb7a1.exe
- Size 396KB
- Sample220719-redxpseddk
- SHA256 cd308fc28a266f7cdb8a9c50794aa97a946b9f36d5180899cdcb6f755b7d9bfb
- MD5 8078f3748972daa35b333ffef41fb7a1
- SHA1 c9a885f304865601bfa1c87c36d0114e8e97e663
- SHA512 bb87bdc2841eefd06daac8ec65555143ad21358894e649baa461fffbf2615395bc251526aaa1e53dc8888aba2ca3383600fc014ac6ecf22c7b53b41af5777cee
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
8078f3748972daa35b333ffef41fb7a1.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target 8078f3748972daa35b333ffef41fb7a1.exe
- Size 396KB
- SHA256 cd308fc28a266f7cdb8a9c50794aa97a946b9f36d5180899cdcb6f755b7d9bfb
- MD5 8078f3748972daa35b333ffef41fb7a1
- SHA1 c9a885f304865601bfa1c87c36d0114e8e97e663
- SHA512 bb87bdc2841eefd06daac8ec65555143ad21358894e649baa461fffbf2615395bc251526aaa1e53dc8888aba2ca3383600fc014ac6ecf22c7b53b41af5777cee
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.