General
- Target 671e6f422545a4273412a90df532cfba
- Size 241KB
- Sample210109-yxrf73fdr6
- SHA256 3729cc0e9183d4e4e6e7c9b82311538cc4357e35f817c32791131cc62a32ae1a
- MD5 671e6f422545a4273412a90df532cfba
- SHA1 f0fc814796366c45b48d998663f26b68bdf84150
- SHA512 2f07e3ce8a344347697a33346fef48cadab56c4e6bb815147bec8d832acee78652926d3e2ce318fa35f3b3fd99090f36148240fb2035c4a14c1f15261e8232c2
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
671e6f422545a4273412a90df532cfba.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
671e6f422545a4273412a90df532cfba.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target 671e6f422545a4273412a90df532cfba
- Size 241KB
- SHA256 3729cc0e9183d4e4e6e7c9b82311538cc4357e35f817c32791131cc62a32ae1a
- MD5 671e6f422545a4273412a90df532cfba
- SHA1 f0fc814796366c45b48d998663f26b68bdf84150
- SHA512 2f07e3ce8a344347697a33346fef48cadab56c4e6bb815147bec8d832acee78652926d3e2ce318fa35f3b3fd99090f36148240fb2035c4a14c1f15261e8232c2
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext