General
-
Target
0991b95d6c82b4feb149d6f910d7e3c2.exe
-
Size
21KB
-
Sample
210218-gaj7cj1hrs
-
MD5
0991b95d6c82b4feb149d6f910d7e3c2
-
SHA1
b6f9340fd9afd30e0747582d11ddf2468429a9bb
-
SHA256
8ad59828630ebb9691c466a275558e87680d02c62b423c9210596c75de2d2c95
-
SHA512
366e733c84a1465bef09b4a63361ca401a3cba7f208e83d12dd7daa823c7b4ba49ee92231cffcc41a97ab5685a3fe72191991b7bc74a18a642f431cd1ed864ee
Static task
static1
Behavioral task
behavioral1
Sample
0991b95d6c82b4feb149d6f910d7e3c2.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
0991b95d6c82b4feb149d6f910d7e3c2.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
0991b95d6c82b4feb149d6f910d7e3c2.exe
-
Size
21KB
-
MD5
0991b95d6c82b4feb149d6f910d7e3c2
-
SHA1
b6f9340fd9afd30e0747582d11ddf2468429a9bb
-
SHA256
8ad59828630ebb9691c466a275558e87680d02c62b423c9210596c75de2d2c95
-
SHA512
366e733c84a1465bef09b4a63361ca401a3cba7f208e83d12dd7daa823c7b4ba49ee92231cffcc41a97ab5685a3fe72191991b7bc74a18a642f431cd1ed864ee
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext
-