General
- Target e002cd501683bae7ebd7acad7eaab891.exe
- Size 276KB
- Sample220727-kbvmqafec6
- SHA256 de12db6c0d14b103eb9478639bad04f2bd7ce6c526bdcd10c73d4ff63864967d
- MD5 e002cd501683bae7ebd7acad7eaab891
- SHA1 4fa1e2e7306cf3e6368c20c4e292b701bcd02268
- SHA512 a746f76ee214c28c4ff83da8aa85c62eecdc3ea9989653ecdad054bc7b2c7cd841ab6751e3e0715bb48fb2c5901ad9733c3fd046323de334b85492d41878d203
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
e002cd501683bae7ebd7acad7eaab891.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target e002cd501683bae7ebd7acad7eaab891.exe
- Size 276KB
- SHA256 de12db6c0d14b103eb9478639bad04f2bd7ce6c526bdcd10c73d4ff63864967d
- MD5 e002cd501683bae7ebd7acad7eaab891
- SHA1 4fa1e2e7306cf3e6368c20c4e292b701bcd02268
- SHA512 a746f76ee214c28c4ff83da8aa85c62eecdc3ea9989653ecdad054bc7b2c7cd841ab6751e3e0715bb48fb2c5901ad9733c3fd046323de334b85492d41878d203
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.