General
- Target c23cfe2f2c3ca19a63b0fec275f6d258.exe
- Size 434KB
- Sample220708-red8gafcf4
- SHA256 62914547213cd93980d10ba7a6bda8efd6104f62e4e8fabb11141737fb8b932f
- MD5 c23cfe2f2c3ca19a63b0fec275f6d258
- SHA1 11a47ad522cdc3afe5395637446d5df08d779225
- SHA512 70e313b572e18d536ab662cd5fbcf7175d70f5d2aaa587055ce518fb123a2c07adbd4589dfe160f8213194e60b8cf173097488387cb36898c23ad5853f8d1d5f
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
c23cfe2f2c3ca19a63b0fec275f6d258.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
tsmc
C2
-
tsmctracking.pro:80
Attributes
-
auth_value
06ff000252c39147f1065ec0a7c9f047
Targets
-
- Target c23cfe2f2c3ca19a63b0fec275f6d258.exe
- Size 434KB
- SHA256 62914547213cd93980d10ba7a6bda8efd6104f62e4e8fabb11141737fb8b932f
- MD5 c23cfe2f2c3ca19a63b0fec275f6d258
- SHA1 11a47ad522cdc3afe5395637446d5df08d779225
- SHA512 70e313b572e18d536ab662cd5fbcf7175d70f5d2aaa587055ce518fb123a2c07adbd4589dfe160f8213194e60b8cf173097488387cb36898c23ad5853f8d1d5f
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.