General

  • Target

    SecuriteInfo.com.Trojan.PWS.Siggen2.60948.5233.14351

  • Size

    19KB

  • Sample

    201228-5fjrragdna

  • MD5

    875c308ab4aefeea743c5fbfd3f47124

  • SHA1

    9f89a0ad7cb44ebfaa8bc8da80ee7e4649d53591

  • SHA256

    bbc85a715451d8f29b7ca73395decea7accbaedec73a7f2a757b248cf7cc462b

  • SHA512

    2ef2bdf6bdd5e633c895974bd90f4b9acc8d194a40a634525d31f4418415d1c30893747eb42f5f5dbbd3307e7e963792628239aa532d854e359f4d27698d1a9d

Score
10/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.PWS.Siggen2.60948.5233.14351

    • Size

      19KB

    • MD5

      875c308ab4aefeea743c5fbfd3f47124

    • SHA1

      9f89a0ad7cb44ebfaa8bc8da80ee7e4649d53591

    • SHA256

      bbc85a715451d8f29b7ca73395decea7accbaedec73a7f2a757b248cf7cc462b

    • SHA512

      2ef2bdf6bdd5e633c895974bd90f4b9acc8d194a40a634525d31f4418415d1c30893747eb42f5f5dbbd3307e7e963792628239aa532d854e359f4d27698d1a9d

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks