General
- Target 24bc079425ffd9aaeccf5118816a48d2.exe
- Size 307KB
- Sample220725-kmk8esbfak
- SHA256 32180e0ffd8f7fa01267821af5d93caebaf13936ae4a2542d2ea627256ce482f
- MD5 24bc079425ffd9aaeccf5118816a48d2
- SHA1 a0b6bb758e6cb25be9276880744f3134f95fa19b
- SHA512 e27d60b1b7be1e94100cdd3eca7ad7c37f773ee824078a3969f7e976f61f7b675da8b425dd63515350d3b44ee13fe21a558b06b336ca836d49cea2714465d47d
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
24bc079425ffd9aaeccf5118816a48d2.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 24bc079425ffd9aaeccf5118816a48d2.exe
- Size 307KB
- SHA256 32180e0ffd8f7fa01267821af5d93caebaf13936ae4a2542d2ea627256ce482f
- MD5 24bc079425ffd9aaeccf5118816a48d2
- SHA1 a0b6bb758e6cb25be9276880744f3134f95fa19b
- SHA512 e27d60b1b7be1e94100cdd3eca7ad7c37f773ee824078a3969f7e976f61f7b675da8b425dd63515350d3b44ee13fe21a558b06b336ca836d49cea2714465d47d
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.