General
- Target 5cde60787daa8a7638cd5b08da74667f.exe
- Size 339KB
- Sample220723-sa1fksfbgn
- SHA256 38bd535fa65763d92b94e6c9637ac99e423e7bfa30bdccd29c2f0d197f43a7fb
- MD5 5cde60787daa8a7638cd5b08da74667f
- SHA1 9e73ac488e46223475cba3debf9a888c3991baa5
- SHA512 5657c42bcf5ab77513516cf12276518fa84ea57c6817c2d610f0b2baeba6d3d3ff2fcd2a534e72de4cab99181f43049d4e8a3b6a32c323b57a7293955743bae7
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
5cde60787daa8a7638cd5b08da74667f.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 5cde60787daa8a7638cd5b08da74667f.exe
- Size 339KB
- SHA256 38bd535fa65763d92b94e6c9637ac99e423e7bfa30bdccd29c2f0d197f43a7fb
- MD5 5cde60787daa8a7638cd5b08da74667f
- SHA1 9e73ac488e46223475cba3debf9a888c3991baa5
- SHA512 5657c42bcf5ab77513516cf12276518fa84ea57c6817c2d610f0b2baeba6d3d3ff2fcd2a534e72de4cab99181f43049d4e8a3b6a32c323b57a7293955743bae7
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.