General
- Target 82c3c7e734f302b36e5e288574f258d8
- Size 394KB
- Sample220723-dha4bsbeg6
- SHA256 cbaa1cc37c479219cc064635b971fee8337fb9d12966a01ae368fb22cebc3e65
- MD5 82c3c7e734f302b36e5e288574f258d8
- SHA1 4a70dd2f8ba5c962c031459a03e76c31ba942189
- SHA512 78b49dfe7ed0937ccb7333d63aa08357d109ed99ef78ae239ead58282a64700616f82aafe3d4e387929e96578ed7e1a37f079205bc5ef714cd80b3a89177d95c
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
82c3c7e734f302b36e5e288574f258d8.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 82c3c7e734f302b36e5e288574f258d8
- Size 394KB
- SHA256 cbaa1cc37c479219cc064635b971fee8337fb9d12966a01ae368fb22cebc3e65
- MD5 82c3c7e734f302b36e5e288574f258d8
- SHA1 4a70dd2f8ba5c962c031459a03e76c31ba942189
- SHA512 78b49dfe7ed0937ccb7333d63aa08357d109ed99ef78ae239ead58282a64700616f82aafe3d4e387929e96578ed7e1a37f079205bc5ef714cd80b3a89177d95c
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.