General
- Target 346ddc63c84547535ce96978b96ceb62.exe
- Size 315KB
- Sample220723-pjba9sedf8
- SHA256 15a742e0f321fd649d5ffeea0940a554c5ad6c6ca400ac238fb282ccb166d565
- MD5 346ddc63c84547535ce96978b96ceb62
- SHA1 67dab1e47c701f44900db14d27e315893eb2368c
- SHA512 9478ff3848909a67a34acbeb88af8d61e61884085649e42202bfb4dc3587c5d735f17e1ea9823d503427e4e955c5880c1b7f5d414d5990d230a9db31687f02c6
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
346ddc63c84547535ce96978b96ceb62.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 346ddc63c84547535ce96978b96ceb62.exe
- Size 315KB
- SHA256 15a742e0f321fd649d5ffeea0940a554c5ad6c6ca400ac238fb282ccb166d565
- MD5 346ddc63c84547535ce96978b96ceb62
- SHA1 67dab1e47c701f44900db14d27e315893eb2368c
- SHA512 9478ff3848909a67a34acbeb88af8d61e61884085649e42202bfb4dc3587c5d735f17e1ea9823d503427e4e955c5880c1b7f5d414d5990d230a9db31687f02c6
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.