General
- Target 52cd4ea6e2b8a7d02ee9e1215d73e710.exe
- Size 333KB
- Sample220724-xbrbhsdce7
- SHA256 6873e39b52c2fe691ba9d2e7da62d723dba2ca3f476b2f92aa11b88bb61451b8
- MD5 52cd4ea6e2b8a7d02ee9e1215d73e710
- SHA1 15b1c7a211af52956e1d546cebc8e1d547ba2633
- SHA512 0ec310e6d38b13ac86148da0155598c493d0504cf684d597417074b7a71bdb77bb881d0eaa96e8e7aec6e8ddc7425f541b5c1ccc5d025210d489de34f703c48d
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
52cd4ea6e2b8a7d02ee9e1215d73e710.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 52cd4ea6e2b8a7d02ee9e1215d73e710.exe
- Size 333KB
- SHA256 6873e39b52c2fe691ba9d2e7da62d723dba2ca3f476b2f92aa11b88bb61451b8
- MD5 52cd4ea6e2b8a7d02ee9e1215d73e710
- SHA1 15b1c7a211af52956e1d546cebc8e1d547ba2633
- SHA512 0ec310e6d38b13ac86148da0155598c493d0504cf684d597417074b7a71bdb77bb881d0eaa96e8e7aec6e8ddc7425f541b5c1ccc5d025210d489de34f703c48d
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.