Overview

overview

10

Static

static

7a81fa7147...3f.exe

windows7_x64

10

7a81fa7147...3f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a81fa7147deb2a12eab21d8159c733f.exe

  • Size

    20KB

  • Sample

    210214-2l7wp9egp2

  • MD5

    7a81fa7147deb2a12eab21d8159c733f

  • SHA1

    7876b3c4b017e6f66f981a219ceed9e8fd57c230

  • SHA256

    e401a949ac7801d662b4f05acb3dc55e604de12632f032c6efecbc607a848ba9

  • SHA512

    1f0f1eefb81e1cdc2fca0173a7830b1cc2d7b1d06b19b6b5c70edac1ecb352716c4bcb7835507ab34333f82e3e2bff6a4a189ad0c982055cab191864c19a6716

Score
10/10
redlineinfostealer

Malware Config

Targets

    • Target

      7a81fa7147deb2a12eab21d8159c733f.exe

    • Size

      20KB

    • MD5

      7a81fa7147deb2a12eab21d8159c733f

    • SHA1

      7876b3c4b017e6f66f981a219ceed9e8fd57c230

    • SHA256

      e401a949ac7801d662b4f05acb3dc55e604de12632f032c6efecbc607a848ba9

    • SHA512

      1f0f1eefb81e1cdc2fca0173a7830b1cc2d7b1d06b19b6b5c70edac1ecb352716c4bcb7835507ab34333f82e3e2bff6a4a189ad0c982055cab191864c19a6716

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks