Overview

overview

10

Static

static

0991b95d6c...c2.exe

windows7_x64

10

0991b95d6c...c2.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0991b95d6c82b4feb149d6f910d7e3c2.exe

  • Size

    21KB

  • Sample

    210218-9l3l9mgvqn

  • MD5

    0991b95d6c82b4feb149d6f910d7e3c2

  • SHA1

    b6f9340fd9afd30e0747582d11ddf2468429a9bb

  • SHA256

    8ad59828630ebb9691c466a275558e87680d02c62b423c9210596c75de2d2c95

  • SHA512

    366e733c84a1465bef09b4a63361ca401a3cba7f208e83d12dd7daa823c7b4ba49ee92231cffcc41a97ab5685a3fe72191991b7bc74a18a642f431cd1ed864ee

Score
10/10
redlineinfostealer

Malware Config

Targets

    • Target

      0991b95d6c82b4feb149d6f910d7e3c2.exe

    • Size

      21KB

    • MD5

      0991b95d6c82b4feb149d6f910d7e3c2

    • SHA1

      b6f9340fd9afd30e0747582d11ddf2468429a9bb

    • SHA256

      8ad59828630ebb9691c466a275558e87680d02c62b423c9210596c75de2d2c95

    • SHA512

      366e733c84a1465bef09b4a63361ca401a3cba7f208e83d12dd7daa823c7b4ba49ee92231cffcc41a97ab5685a3fe72191991b7bc74a18a642f431cd1ed864ee

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks