General
-
Target
14e44f49785c8ded87796a6da24f7130.exe
-
Size
638KB
-
Sample
210219-c8ystyhrla
-
MD5
14e44f49785c8ded87796a6da24f7130
-
SHA1
3e33b7b9c9fe6d2f7b7989d30ea0eb710fac9abe
-
SHA256
002169163197e9a6fbe52c9d5cad8e901e52613d2ff4efbe2ccac367cea51af9
-
SHA512
4c43222fe7c6ae101a767ffac21ca70654e95b5f774f89522a3fee2a1f4a1f2530797d3b9d65e2167e0bcd73844b47c941189facdd08101ead00bb7992437ae7
Static task
static1
Behavioral task
behavioral1
Sample
14e44f49785c8ded87796a6da24f7130.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
14e44f49785c8ded87796a6da24f7130.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
14e44f49785c8ded87796a6da24f7130.exe
-
Size
638KB
-
MD5
14e44f49785c8ded87796a6da24f7130
-
SHA1
3e33b7b9c9fe6d2f7b7989d30ea0eb710fac9abe
-
SHA256
002169163197e9a6fbe52c9d5cad8e901e52613d2ff4efbe2ccac367cea51af9
-
SHA512
4c43222fe7c6ae101a767ffac21ca70654e95b5f774f89522a3fee2a1f4a1f2530797d3b9d65e2167e0bcd73844b47c941189facdd08101ead00bb7992437ae7
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext
-