General
- Target e5b93b9be24c0423c041d37a78a7e722.exe
- Size 405KB
- Sample220717-bc823aaecm
- SHA256 701ddd9f20c73127e1807cd301a9aad4f2ff3e6a057bdc43f2870e29a8e8f8b2
- MD5 e5b93b9be24c0423c041d37a78a7e722
- SHA1 03c241665679be5b8d507f8807da6e48f0355e58
- SHA512 15803358f9b0601befea3c313171ab3cb48a5b792eba98f7d75b48e5d706688d4e66b2749349b209652679e49f790ff4c076261997cb44127160da77fe0f5c28
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
e5b93b9be24c0423c041d37a78a7e722.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target e5b93b9be24c0423c041d37a78a7e722.exe
- Size 405KB
- SHA256 701ddd9f20c73127e1807cd301a9aad4f2ff3e6a057bdc43f2870e29a8e8f8b2
- MD5 e5b93b9be24c0423c041d37a78a7e722
- SHA1 03c241665679be5b8d507f8807da6e48f0355e58
- SHA512 15803358f9b0601befea3c313171ab3cb48a5b792eba98f7d75b48e5d706688d4e66b2749349b209652679e49f790ff4c076261997cb44127160da77fe0f5c28
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.