Overview

overview

10

Static

static

773d31b089...c8.exe

windows7_x64

10

773d31b089...c8.exe

windows10_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    773d31b089534970bb9692b68ec8f8c8.exe

  • Size

    252KB

  • Sample

    201109-fm8g7qneqj

  • MD5

    773d31b089534970bb9692b68ec8f8c8

  • SHA1

    0b4413e458cc03e2d4d0bb43b468ccbff0d0da97

  • SHA256

    f039494ad7d13c65dc288470e8116ee69b69ad3ef16375f2161c2875e9221e96

  • SHA512

    83ecaecbb634dc1cdf3bcab75c8d91e9fd26594ccc3667dfe1ba2253af07db5a33ec1adcbd9fe97cfd46a4bd5ea6002229e714bb17417d3ec7dd48a256f5d54b

Score
10/10
redlineinfostealerpersistence

Malware Config

Targets

    • Target

      773d31b089534970bb9692b68ec8f8c8.exe

    • Size

      252KB

    • MD5

      773d31b089534970bb9692b68ec8f8c8

    • SHA1

      0b4413e458cc03e2d4d0bb43b468ccbff0d0da97

    • SHA256

      f039494ad7d13c65dc288470e8116ee69b69ad3ef16375f2161c2875e9221e96

    • SHA512

      83ecaecbb634dc1cdf3bcab75c8d91e9fd26594ccc3667dfe1ba2253af07db5a33ec1adcbd9fe97cfd46a4bd5ea6002229e714bb17417d3ec7dd48a256f5d54b

    Score
    10/10
    redlineinfostealerpersistence

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks