General
- Target SecuriteInfo.com.Trojan.GenericKDZ.90093.5132.30580
- Size 315KB
- Sample220723-jj9aeadcap
- SHA256 e6389e05edf0eafd2330af2d40b0fc220babc1f4a0e827b46d71d5aeb3acc1f3
- MD5 baae235f28897c083848d9d846769566
- SHA1 89bb3b6550864914b94682548be5e53436817b23
- SHA512 911feb7994f92ba4757cfbb610bc42a0df65ecdde49e9ee50cf41660197d4f2000fdce98877760f84783698aadb82d53f319aad422e1aab72cd3a13638443f44
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.GenericKDZ.90093.5132.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target SecuriteInfo.com.Trojan.GenericKDZ.90093.5132.30580
- Size 315KB
- SHA256 e6389e05edf0eafd2330af2d40b0fc220babc1f4a0e827b46d71d5aeb3acc1f3
- MD5 baae235f28897c083848d9d846769566
- SHA1 89bb3b6550864914b94682548be5e53436817b23
- SHA512 911feb7994f92ba4757cfbb610bc42a0df65ecdde49e9ee50cf41660197d4f2000fdce98877760f84783698aadb82d53f319aad422e1aab72cd3a13638443f44
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.