General
- Target 554ad3adb9ebba89765f308eee0fcdbf.exe
- Size 339KB
- Sample220723-njt8psebb7
- SHA256 5edf1f1114d81f5f8a1a2ddefb49df29ff83650d2a3ae6d819e15a028987bbad
- MD5 554ad3adb9ebba89765f308eee0fcdbf
- SHA1 42c25146f2322dec6ba7bd81d8754725785ca1ab
- SHA512 96424fe2d6640bdb9fb11e286263d571f10f63b7999d5259501c3361358bfd9f29de0bc1c39fa666f5853217740ad95a5e78d1adb1a3d31448d377b033b9f5cb
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
554ad3adb9ebba89765f308eee0fcdbf.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 554ad3adb9ebba89765f308eee0fcdbf.exe
- Size 339KB
- SHA256 5edf1f1114d81f5f8a1a2ddefb49df29ff83650d2a3ae6d819e15a028987bbad
- MD5 554ad3adb9ebba89765f308eee0fcdbf
- SHA1 42c25146f2322dec6ba7bd81d8754725785ca1ab
- SHA512 96424fe2d6640bdb9fb11e286263d571f10f63b7999d5259501c3361358bfd9f29de0bc1c39fa666f5853217740ad95a5e78d1adb1a3d31448d377b033b9f5cb
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.