General
- Target 7a03e0d7023930e21228437a8869e10d.exe
- Size 398KB
- Sample220727-kpajpsffd8
- SHA256 2dbd109d092ee2bce4987e7cab9aafcd092fb56eaecff82a027f78e55f6ae5cd
- MD5 7a03e0d7023930e21228437a8869e10d
- SHA1 1f24b34285dce51eab6f9d0771a20a4b6e89b90e
- SHA512 380a6b3c12852f4a0b4c46380fd1520e28edf68cd0eb7a2b99398217f60e97f4723a1bcbf01b2e13429110ba66d4780d7349bf1fe0bec42fcbb47b4b9bb87104
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
7a03e0d7023930e21228437a8869e10d.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 7a03e0d7023930e21228437a8869e10d.exe
- Size 398KB
- SHA256 2dbd109d092ee2bce4987e7cab9aafcd092fb56eaecff82a027f78e55f6ae5cd
- MD5 7a03e0d7023930e21228437a8869e10d
- SHA1 1f24b34285dce51eab6f9d0771a20a4b6e89b90e
- SHA512 380a6b3c12852f4a0b4c46380fd1520e28edf68cd0eb7a2b99398217f60e97f4723a1bcbf01b2e13429110ba66d4780d7349bf1fe0bec42fcbb47b4b9bb87104
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.