General
- Target 209692ea896a5ba0b82a3f22b36c0e47.exe
- Size 332KB
- Sample220724-lvg2eacdfl
- SHA256 1000b7f04f4ff25ea981443d22ff8b1f6c09bb36fc8aa90126bc19f4d59046b8
- MD5 209692ea896a5ba0b82a3f22b36c0e47
- SHA1 a05e5ed7088bdb83ff1fbb2c67241f5d91919c49
- SHA512 7c15d74c4308ba2acb6389bea73e7ecc7647f25b502ca2f1b2a281727b11ccb8a0d2136951211bfd6aa5074bceaedbd31390f077c11982fff35c8f8e2e4f62e4
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
209692ea896a5ba0b82a3f22b36c0e47.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 209692ea896a5ba0b82a3f22b36c0e47.exe
- Size 332KB
- SHA256 1000b7f04f4ff25ea981443d22ff8b1f6c09bb36fc8aa90126bc19f4d59046b8
- MD5 209692ea896a5ba0b82a3f22b36c0e47
- SHA1 a05e5ed7088bdb83ff1fbb2c67241f5d91919c49
- SHA512 7c15d74c4308ba2acb6389bea73e7ecc7647f25b502ca2f1b2a281727b11ccb8a0d2136951211bfd6aa5074bceaedbd31390f077c11982fff35c8f8e2e4f62e4
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.