General
- Target SecuriteInfo.com.Variant.Mikey.139491.7403.4528
- Size 315KB
- Sample220723-ffnyhscbe7
- SHA256 f6815f81634635952021d04d064faeac6f8288e679e2c52b128ead985fd67ed4
- MD5 b6bfeb8da1cf47d3290fd3371f1f2527
- SHA1 c2e1b15b20e871f6680c8fbb7ca66ff3516b5f57
- SHA512 549e2e2194abc6be1c3a235bf77e6d633a8cbc868dad0aaa28257bb3229b071c3975f3e35d10b2619f867c4cc82ee1be4e4f3e7132d7dedee92137ff48f0464d
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Mikey.139491.7403.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target SecuriteInfo.com.Variant.Mikey.139491.7403.4528
- Size 315KB
- SHA256 f6815f81634635952021d04d064faeac6f8288e679e2c52b128ead985fd67ed4
- MD5 b6bfeb8da1cf47d3290fd3371f1f2527
- SHA1 c2e1b15b20e871f6680c8fbb7ca66ff3516b5f57
- SHA512 549e2e2194abc6be1c3a235bf77e6d633a8cbc868dad0aaa28257bb3229b071c3975f3e35d10b2619f867c4cc82ee1be4e4f3e7132d7dedee92137ff48f0464d
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.