General
- Target E-invoicing_17_01_2021_804614300125.exe
- Size 20KB
- Sample210118-mlk9zasqds
- SHA256 dc6aaf7acf8b088dd2f0a3cbffd5ae7e56ed1680aeccb2ff7eecb9d56796cf68
- MD5 6a30c4f159af10611e8b6780ca7e9fb9
- SHA1 f444965d6192c1dd8779665a5ec5f0dbc2e8781b
- SHA512 1da80a9e85d500a6ea00a650712f8227981feb20c6010def62d08657d822cc0c103eba8e21ca1293d22a23155953ac27a9e48ee3f9fe89c1ae5b08d59eef2dab
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
E-invoicing_17_01_2021_804614300125.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
E-invoicing_17_01_2021_804614300125.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target E-invoicing_17_01_2021_804614300125.exe
- Size 20KB
- SHA256 dc6aaf7acf8b088dd2f0a3cbffd5ae7e56ed1680aeccb2ff7eecb9d56796cf68
- MD5 6a30c4f159af10611e8b6780ca7e9fb9
- SHA1 f444965d6192c1dd8779665a5ec5f0dbc2e8781b
- SHA512 1da80a9e85d500a6ea00a650712f8227981feb20c6010def62d08657d822cc0c103eba8e21ca1293d22a23155953ac27a9e48ee3f9fe89c1ae5b08d59eef2dab
- MD5 SHA1 SHA512
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine Payload
Suspicious use of SetThreadContext