General
- Target 0fbd69188f76357ad9924b2b5d21f80c.exe
- Size 396KB
- Sample220720-m4jf9sefd9
- SHA256 c6e10756d944d7ee3475e15540983a2e9fc8531b5d0a1fde0396b019a9b6feb5
- MD5 0fbd69188f76357ad9924b2b5d21f80c
- SHA1 4bb0f9e2ddaed6953fb137da76415ca7f438e32a
- SHA512 2061c0b64ae9c585049b2d9a94addc92a3b0c0fc09e50e16804498d8b958b83117c64f6250da740eac718c21a0d00fb12260bea419b5473fd7078b7799137dc2
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
0fbd69188f76357ad9924b2b5d21f80c.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target 0fbd69188f76357ad9924b2b5d21f80c.exe
- Size 396KB
- SHA256 c6e10756d944d7ee3475e15540983a2e9fc8531b5d0a1fde0396b019a9b6feb5
- MD5 0fbd69188f76357ad9924b2b5d21f80c
- SHA1 4bb0f9e2ddaed6953fb137da76415ca7f438e32a
- SHA512 2061c0b64ae9c585049b2d9a94addc92a3b0c0fc09e50e16804498d8b958b83117c64f6250da740eac718c21a0d00fb12260bea419b5473fd7078b7799137dc2
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.