General
-
Target
Mfdgizpvvdk2.bin
-
Size
851KB
-
Sample
210109-j81zyagq3j
-
MD5
a9f97dc2289b31d13ca8dbcb70505ae2
-
SHA1
37fb44ea49c12e46c4865304ea0740b14f49daad
-
SHA256
f5104bdce7833fc1389cf0e5c5e46a07e69cf8e85abb4062fc4d00278fbcdfb0
-
SHA512
efb132f3ec5f29ff64195e546d5bbd57a2618428e7651ffb60efa8e79f8f966b8a60062118e645c24acdca6f01ed9f8de640c750cea696f6862be83cb5c1f369
Static task
static1
Behavioral task
behavioral1
Sample
Mfdgizpvvdk2.bin.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
Mfdgizpvvdk2.bin.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
Mfdgizpvvdk2.bin
-
Size
851KB
-
MD5
a9f97dc2289b31d13ca8dbcb70505ae2
-
SHA1
37fb44ea49c12e46c4865304ea0740b14f49daad
-
SHA256
f5104bdce7833fc1389cf0e5c5e46a07e69cf8e85abb4062fc4d00278fbcdfb0
-
SHA512
efb132f3ec5f29ff64195e546d5bbd57a2618428e7651ffb60efa8e79f8f966b8a60062118e645c24acdca6f01ed9f8de640c750cea696f6862be83cb5c1f369
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext
-