General
- Target 01a154d90b3a19c19b93543b7e33b850.exe
- Size 272KB
- Sample220725-v7prfsgef4
- SHA256 4c7912413fc0a68dabe801a4d21ddc6d39490f02b30e9bd9327b2fedea572e4e
- MD5 01a154d90b3a19c19b93543b7e33b850
- SHA1 4a04ea5ed5a3d3ec5cd7bfd8ac9acd3bcaaad038
- SHA512 2fafc26cfe03c792e876b9bbe6b879025d8bf5762c1d753416f59f7769b3502aeefceff23319e8facd142eca58c36b4171635e10658b95b37455022d21280181
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
01a154d90b3a19c19b93543b7e33b850.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 01a154d90b3a19c19b93543b7e33b850.exe
- Size 272KB
- SHA256 4c7912413fc0a68dabe801a4d21ddc6d39490f02b30e9bd9327b2fedea572e4e
- MD5 01a154d90b3a19c19b93543b7e33b850
- SHA1 4a04ea5ed5a3d3ec5cd7bfd8ac9acd3bcaaad038
- SHA512 2fafc26cfe03c792e876b9bbe6b879025d8bf5762c1d753416f59f7769b3502aeefceff23319e8facd142eca58c36b4171635e10658b95b37455022d21280181
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.