General

  • Target

    929ed4275d64c4b6f0cfba7248359962.exe

  • Size

    779KB

  • Sample

    201222-19nqr78hvn

  • MD5

    929ed4275d64c4b6f0cfba7248359962

  • SHA1

    cf25a1c2ebf493ae02955b5675eb808b2d8ad308

  • SHA256

    68a83414937a4db15ac483119e40182e1e28e30cb5c50e35c69195f3615b2bc5

  • SHA512

    c79abb5d3f8d091577057c815a98d1adb77a63872cd6cf84ffcd5cac22ca3f12b6b070219af79b30968343180e5805b5e1b0c57b6591a39c6f6c521a7584315a

Score
10/10

Malware Config

Targets

    • Target

      929ed4275d64c4b6f0cfba7248359962.exe

    • Size

      779KB

    • MD5

      929ed4275d64c4b6f0cfba7248359962

    • SHA1

      cf25a1c2ebf493ae02955b5675eb808b2d8ad308

    • SHA256

      68a83414937a4db15ac483119e40182e1e28e30cb5c50e35c69195f3615b2bc5

    • SHA512

      c79abb5d3f8d091577057c815a98d1adb77a63872cd6cf84ffcd5cac22ca3f12b6b070219af79b30968343180e5805b5e1b0c57b6591a39c6f6c521a7584315a

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks