General
- Target 05be9142fff5e25bec66308bf9abb1d1.exe
- Size 320KB
- Sample220826-hmhfeshgd4
- SHA256 f5da5727bee0ded25bcad5a9cec1899d99f9519cdbc9a741effb4d0fd1f9abfd
- MD5 05be9142fff5e25bec66308bf9abb1d1
- SHA1 981470df0f4602ca0b8b02aad13c09e411063ffa
- SHA512 7578523de1aa2c4671d51046ebc6bec85bfe6f5408c43843e810100f1cc101955dc7bd7778e105764cef8c15bf4c8f5c2165fb5415a6e1f74fef3b97b8b2e6af
- SSDEEP 6144:xQJYQ2JYEKK92RUE1JRmkn9drt/1gnn3Hy6rS1PigaLwVf:xQOjJAQwUCY+dynXf
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
05be9142fff5e25bec66308bf9abb1d1.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
cspace
C2
-
clitspace.com:80
Attributes
-
auth_value
aa25c0a7500ac071e2027483d14b1d31
Targets
-
- Target 05be9142fff5e25bec66308bf9abb1d1.exe
- Size 320KB
- SHA256 f5da5727bee0ded25bcad5a9cec1899d99f9519cdbc9a741effb4d0fd1f9abfd
- MD5 05be9142fff5e25bec66308bf9abb1d1
- SHA1 981470df0f4602ca0b8b02aad13c09e411063ffa
- SHA512 7578523de1aa2c4671d51046ebc6bec85bfe6f5408c43843e810100f1cc101955dc7bd7778e105764cef8c15bf4c8f5c2165fb5415a6e1f74fef3b97b8b2e6af
- SSDEEP 6144:xQJYQ2JYEKK92RUE1JRmkn9drt/1gnn3Hy6rS1PigaLwVf:xQOjJAQwUCY+dynXf
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.