General
- Target 93d6bf0707a3f97495de5c6282aa6c8c.exe
- Size 394KB
- Sample220830-2p23dschcn
- SHA256 82142e17df191dd5f20c058a3277dfe1ec6da22efd47bb2ef77a0efab0065998
- MD5 93d6bf0707a3f97495de5c6282aa6c8c
- SHA1 d3d9919588aab1cb497c8941d4961aceca7d539c
- SHA512 7f11b1c4d5c338d7561e4a9e63921094e3b919d7826a8287f1191969dc7ce8887181689dd6731c1e104d1a8b54916af4898516ca971c6c8ae6fdb81568bdc95a
- SSDEEP 12288:glw8d1ImHnmuxbCyYt5NNidyykiTTPUJBRoVzQ:qE+nVCD94dc9XRkQ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
93d6bf0707a3f97495de5c6282aa6c8c.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
cspace
C2
-
clitspace.com:80
Attributes
-
auth_value
aa25c0a7500ac071e2027483d14b1d31
Targets
-
- Target 93d6bf0707a3f97495de5c6282aa6c8c.exe
- Size 394KB
- SHA256 82142e17df191dd5f20c058a3277dfe1ec6da22efd47bb2ef77a0efab0065998
- MD5 93d6bf0707a3f97495de5c6282aa6c8c
- SHA1 d3d9919588aab1cb497c8941d4961aceca7d539c
- SHA512 7f11b1c4d5c338d7561e4a9e63921094e3b919d7826a8287f1191969dc7ce8887181689dd6731c1e104d1a8b54916af4898516ca971c6c8ae6fdb81568bdc95a
- SSDEEP 12288:glw8d1ImHnmuxbCyYt5NNidyykiTTPUJBRoVzQ:qE+nVCD94dc9XRkQ
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.