General
- Target d713a3a216d2b71ef61eaa4ef39e242c
- Size 295KB
- Sample220722-mdncjaedf6
- SHA256 d599e4b6ca213b07dcb3cb0f6e57dbd921d954889cf05441dbc19db2d96fca23
- MD5 d713a3a216d2b71ef61eaa4ef39e242c
- SHA1 7e83f039a97ea6bf4246875eb7c4a95870b14bfd
- SHA512 f40ce7e21464dd82df88a97dec019adeec82a87cb5f3b1c19379150d83be93fa1ce7d7caf9fa9a3a19657925f730d3efc469ee13647bcae1ad400c9a5abc70b0
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
d713a3a216d2b71ef61eaa4ef39e242c.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target d713a3a216d2b71ef61eaa4ef39e242c
- Size 295KB
- SHA256 d599e4b6ca213b07dcb3cb0f6e57dbd921d954889cf05441dbc19db2d96fca23
- MD5 d713a3a216d2b71ef61eaa4ef39e242c
- SHA1 7e83f039a97ea6bf4246875eb7c4a95870b14bfd
- SHA512 f40ce7e21464dd82df88a97dec019adeec82a87cb5f3b1c19379150d83be93fa1ce7d7caf9fa9a3a19657925f730d3efc469ee13647bcae1ad400c9a5abc70b0
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.