General
-
Target
cbdd85315022d3c984a95c7c89c62167.exe
-
Size
20KB
-
Sample
210215-368fjg9mej
-
MD5
cbdd85315022d3c984a95c7c89c62167
-
SHA1
5556eee0f033dfcd035049e514fa16c465bddfa7
-
SHA256
60a4e3f1d748ace4e6b82ba68fce30bf35b0f2e6bbbb9aa1e8d690c7406b744d
-
SHA512
e6ab87ff2facdc6e1bb78dfdb1c517a791934d9baa8ffc83ff90bad4a240609798f197ccb171d2edfb608edb71a134d678849c8addaaed7a6a29896834f6006a
Static task
static1
Behavioral task
behavioral1
Sample
cbdd85315022d3c984a95c7c89c62167.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
cbdd85315022d3c984a95c7c89c62167.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
cbdd85315022d3c984a95c7c89c62167.exe
-
Size
20KB
-
MD5
cbdd85315022d3c984a95c7c89c62167
-
SHA1
5556eee0f033dfcd035049e514fa16c465bddfa7
-
SHA256
60a4e3f1d748ace4e6b82ba68fce30bf35b0f2e6bbbb9aa1e8d690c7406b744d
-
SHA512
e6ab87ff2facdc6e1bb78dfdb1c517a791934d9baa8ffc83ff90bad4a240609798f197ccb171d2edfb608edb71a134d678849c8addaaed7a6a29896834f6006a
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext
-