General
- Target a43c44619c84a23103d2b2c01d4e6ae4.exe
- Size 275KB
- Sample220727-kepkwafef4
- SHA256 7254ca943168a2ba0be2df247a8399a66b9366f3b8a99a60abbea53b25ed38ca
- MD5 a43c44619c84a23103d2b2c01d4e6ae4
- SHA1 6e77dee1beeed693e9d8089e98c70a762acff6e7
- SHA512 04be0cf1e7e0f1fcc676cafe0344a9a50692e94df27b1390b1cb206225516b44cefdeb63ec28e4ceb1e979edf1215928e15c4e18e8e69e5e602538fec6d21d89
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
a43c44619c84a23103d2b2c01d4e6ae4.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target a43c44619c84a23103d2b2c01d4e6ae4.exe
- Size 275KB
- SHA256 7254ca943168a2ba0be2df247a8399a66b9366f3b8a99a60abbea53b25ed38ca
- MD5 a43c44619c84a23103d2b2c01d4e6ae4
- SHA1 6e77dee1beeed693e9d8089e98c70a762acff6e7
- SHA512 04be0cf1e7e0f1fcc676cafe0344a9a50692e94df27b1390b1cb206225516b44cefdeb63ec28e4ceb1e979edf1215928e15c4e18e8e69e5e602538fec6d21d89
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.