General
- Target SecuriteInfo.com.Gen.Variant.Barys.54078.8563.7745
- Size 859KB
- Sample201109-rnwq18cbfa
- SHA256 aa0ef170fbdf28b626cafc71c401ce5e5b151efca751e1301ab1d68ddc6af5ad
- MD5 a2a86e07879b36c569f8de2915d7375b
- SHA1 0b5b4b8226c7c8e9c1d64aee8209dae60a14745c
- SHA512 54bc2619c13be41bf23312da0e526386fee837bd4f5ec3293ce19e9e01ee67b0d2f02edb8567d806df034a37eca33f2b8f6e4837d63a1d9bd29fd45f66444426
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Gen.Variant.Barys.54078.8563.7745.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Gen.Variant.Barys.54078.8563.7745.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Gen.Variant.Barys.54078.8563.7745
- Size 859KB
- SHA256 aa0ef170fbdf28b626cafc71c401ce5e5b151efca751e1301ab1d68ddc6af5ad
- MD5 a2a86e07879b36c569f8de2915d7375b
- SHA1 0b5b4b8226c7c8e9c1d64aee8209dae60a14745c
- SHA512 54bc2619c13be41bf23312da0e526386fee837bd4f5ec3293ce19e9e01ee67b0d2f02edb8567d806df034a37eca33f2b8f6e4837d63a1d9bd29fd45f66444426
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext