Overview

overview

10

Static

static

14d9e9e299...7d.exe

windows7_x64

10

14d9e9e299...7d.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14d9e9e29951389651ada7196394637d.exe

  • Size

    18KB

  • Sample

    201215-fspz4zpcks

  • MD5

    14d9e9e29951389651ada7196394637d

  • SHA1

    50163e90ff9d1921ca5a5097634f25124a6b50fb

  • SHA256

    2b14c418ece19eda5bffd6234b71eb9b60eb9f07c80a3850fb7371fed92ad63f

  • SHA512

    a181003d761574d40155ee39bf355c41a39ef6033eb91d5ca8f78569e37f2204a7ee79fbcf50027325297f5f59b0ee49bef70bbd7157a32aa38ca0f92e540915

Score
10/10
redlineinfostealer

Malware Config

Targets

    • Target

      14d9e9e29951389651ada7196394637d.exe

    • Size

      18KB

    • MD5

      14d9e9e29951389651ada7196394637d

    • SHA1

      50163e90ff9d1921ca5a5097634f25124a6b50fb

    • SHA256

      2b14c418ece19eda5bffd6234b71eb9b60eb9f07c80a3850fb7371fed92ad63f

    • SHA512

      a181003d761574d40155ee39bf355c41a39ef6033eb91d5ca8f78569e37f2204a7ee79fbcf50027325297f5f59b0ee49bef70bbd7157a32aa38ca0f92e540915

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks