General
- Target b73b53e10d9b6b68c808b25a38b8465f.exe
- Size 273KB
- Sample220726-h4x77sehhl
- SHA256 8ac201a33dd63f08721cbb3f23820e13c9e1b28cfc9f32fa6e4452ebfa00ab3f
- MD5 b73b53e10d9b6b68c808b25a38b8465f
- SHA1 5255d194a17c70d758050b820d824a6d5fb2da31
- SHA512 674aae6c56acd66cd86eb20a41cc915f7e07d0484f288568c2be5200981d68a36152e555c4d1587f5787c7c7c917f64c9739552a0525f9a20749aee2d4403413
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
b73b53e10d9b6b68c808b25a38b8465f.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target b73b53e10d9b6b68c808b25a38b8465f.exe
- Size 273KB
- SHA256 8ac201a33dd63f08721cbb3f23820e13c9e1b28cfc9f32fa6e4452ebfa00ab3f
- MD5 b73b53e10d9b6b68c808b25a38b8465f
- SHA1 5255d194a17c70d758050b820d824a6d5fb2da31
- SHA512 674aae6c56acd66cd86eb20a41cc915f7e07d0484f288568c2be5200981d68a36152e555c4d1587f5787c7c7c917f64c9739552a0525f9a20749aee2d4403413
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.