Overview

overview

10

Static

static

Ramstam.exe

windows7_x64

10

Ramstam.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ramstam.exe

  • Size

    25KB

  • Sample

    210125-3gmh5wrda2

  • MD5

    79870a39c043dbc5e6c1959ae1ca61d8

  • SHA1

    aa889650128a5178205c5d74894b0ade97d0cee0

  • SHA256

    38ff1916bf18ce69b3dc98a2a81160d19023c77e5e83e240798114d249886eb8

  • SHA512

    dd2264e9cd18625c7a061604f6469e059f7ee9095d860723aea6f638bd2acf4101b9c3ce7f6bd588dc3cfee66d40b145804c18bd38668b41789bc2769fc4e906

Score
10/10
redlineinfostealer

Malware Config

Targets

    • Target

      Ramstam.exe

    • Size

      25KB

    • MD5

      79870a39c043dbc5e6c1959ae1ca61d8

    • SHA1

      aa889650128a5178205c5d74894b0ade97d0cee0

    • SHA256

      38ff1916bf18ce69b3dc98a2a81160d19023c77e5e83e240798114d249886eb8

    • SHA512

      dd2264e9cd18625c7a061604f6469e059f7ee9095d860723aea6f638bd2acf4101b9c3ce7f6bd588dc3cfee66d40b145804c18bd38668b41789bc2769fc4e906

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks