General
- Target 893da535e267b71aef120c2f45aadae4.exe
- Size 395KB
- Sample220720-ld7whadhg9
- SHA256 21a608f6afe833f711e4f2f3e9f0ffe8fb8aa5262b49956d3a44c9d32fe22edd
- MD5 893da535e267b71aef120c2f45aadae4
- SHA1 8685adc95663ba5ed34768dc8a7c04bbe36c830f
- SHA512 e83094a83f963970ba636b6565bcb2b10ffa3070dc62710b814892aa78e60beb531cfc21d325b27785aba96fcb8a9b632239a338a3dcc283ce38bf69236970d1
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
893da535e267b71aef120c2f45aadae4.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target 893da535e267b71aef120c2f45aadae4.exe
- Size 395KB
- SHA256 21a608f6afe833f711e4f2f3e9f0ffe8fb8aa5262b49956d3a44c9d32fe22edd
- MD5 893da535e267b71aef120c2f45aadae4
- SHA1 8685adc95663ba5ed34768dc8a7c04bbe36c830f
- SHA512 e83094a83f963970ba636b6565bcb2b10ffa3070dc62710b814892aa78e60beb531cfc21d325b27785aba96fcb8a9b632239a338a3dcc283ce38bf69236970d1
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.