General
- Target 68940d1670102ffd3837a98b74a4b6cf
- Size 315KB
- Sample220723-ddaxrsbee4
- SHA256 2e8ff5e38a66cc9c56fe86ef7dae171d32535bc2fe0fca2f13ccfa8bec17b853
- MD5 68940d1670102ffd3837a98b74a4b6cf
- SHA1 f7f3876eac54498ab57def28afb8d8bd11945ed3
- SHA512 50775548814b4d739e83b5939d3022d8c5ecd7dac4c86c5c01ffc4d754d174cc6faeffba205d04a030339b8343e102e117622cd065ab64b8e3af1e9a3ddd64e9
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
68940d1670102ffd3837a98b74a4b6cf.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 68940d1670102ffd3837a98b74a4b6cf
- Size 315KB
- SHA256 2e8ff5e38a66cc9c56fe86ef7dae171d32535bc2fe0fca2f13ccfa8bec17b853
- MD5 68940d1670102ffd3837a98b74a4b6cf
- SHA1 f7f3876eac54498ab57def28afb8d8bd11945ed3
- SHA512 50775548814b4d739e83b5939d3022d8c5ecd7dac4c86c5c01ffc4d754d174cc6faeffba205d04a030339b8343e102e117622cd065ab64b8e3af1e9a3ddd64e9
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.