General
- Target 07a5858a1df5330936c841aceec323ac.exe
- Size 289KB
- Sample220721-vcs6dshccn
- SHA256 b5f48fd269e53ac78fa00c3e2793e7f8c8a9cdb5f6b3cf0203ae06ee5572a845
- MD5 07a5858a1df5330936c841aceec323ac
- SHA1 21c2b447cfdb496cb7a245e2222bcb764a7540b5
- SHA512 cb9a492b450dce135ba927ab27e0dede1fb929924e08f50af8ec4201e92d38a2c66802cc2bc9371dd81451f91be9d6b91342f8152eef0b1be070e87a3f8aa649
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
07a5858a1df5330936c841aceec323ac.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target 07a5858a1df5330936c841aceec323ac.exe
- Size 289KB
- SHA256 b5f48fd269e53ac78fa00c3e2793e7f8c8a9cdb5f6b3cf0203ae06ee5572a845
- MD5 07a5858a1df5330936c841aceec323ac
- SHA1 21c2b447cfdb496cb7a245e2222bcb764a7540b5
- SHA512 cb9a492b450dce135ba927ab27e0dede1fb929924e08f50af8ec4201e92d38a2c66802cc2bc9371dd81451f91be9d6b91342f8152eef0b1be070e87a3f8aa649
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.