General

  • Target
    d5a3a3a01060c1632fa6508b8d267b08.exe
  • Size 980KB
  • Sample201229-d6ssdkd85j
  • SHA256 931210400364c50e45ab51294521789d451406a9538a38fd99cce928c9188f53
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      d5a3a3a01060c1632fa6508b8d267b08.exe
    • Size 980KB
    • SHA256 931210400364c50e45ab51294521789d451406a9538a38fd99cce928c9188f53
    • MD5 SHA1 SHA512
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks