General
- Target c76924061ce42baabc8c2740f0dd1a2e.exe
- Size 334KB
- Sample220725-hmhfesaha4
- SHA256 43a9506cae36a6cfca17b394c67326d7ee72be981b035f42ee09bdd4df4d6df0
- MD5 c76924061ce42baabc8c2740f0dd1a2e
- SHA1 ed6492dc0b48945984e982f5a3e7b6cbbe6edd80
- SHA512 972530019e7f345b6d9352e4e5af94eb1d9cf3ae7f8c692136ef2938192afa7ec7430dd197fa1d1cddb635f2353c907beac724e2aed90fb18298c3eca4d897f7
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
c76924061ce42baabc8c2740f0dd1a2e.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target c76924061ce42baabc8c2740f0dd1a2e.exe
- Size 334KB
- SHA256 43a9506cae36a6cfca17b394c67326d7ee72be981b035f42ee09bdd4df4d6df0
- MD5 c76924061ce42baabc8c2740f0dd1a2e
- SHA1 ed6492dc0b48945984e982f5a3e7b6cbbe6edd80
- SHA512 972530019e7f345b6d9352e4e5af94eb1d9cf3ae7f8c692136ef2938192afa7ec7430dd197fa1d1cddb635f2353c907beac724e2aed90fb18298c3eca4d897f7
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.