General
-
Target
Slaking.exe
-
Size
35KB
-
Sample
201119-5pkkbvhjtn
-
MD5
77df4a375a27bfecc3c44317eff75bdc
-
SHA1
49f11fad9a2522f198fa4cbe2df89171781177d3
-
SHA256
154df0e5a18c811df58c1fab786001c5aa9d3a80640793578759a15a34597acb
-
SHA512
42bf0500231241f953cea5c415afe37d60a8942ecd6cb0b7e79c42a24a1013b0989dcb3587068a6bcee77b2271c1ca9484d64f3a3791681949edc723b1f37a1b
Static task
static1
Behavioral task
behavioral1
Sample
Slaking.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
Slaking.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
Slaking.exe
-
Size
35KB
-
MD5
77df4a375a27bfecc3c44317eff75bdc
-
SHA1
49f11fad9a2522f198fa4cbe2df89171781177d3
-
SHA256
154df0e5a18c811df58c1fab786001c5aa9d3a80640793578759a15a34597acb
-
SHA512
42bf0500231241f953cea5c415afe37d60a8942ecd6cb0b7e79c42a24a1013b0989dcb3587068a6bcee77b2271c1ca9484d64f3a3791681949edc723b1f37a1b
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext
-