Overview

overview

10

Static

static

ce0f93d2bb...36.exe

windows7_x64

5

ce0f93d2bb...36.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce0f93d2bb7f18632d6695cf4800f436.exe

  • Size

    1.4MB

  • Sample

    210317-1aw72pwaba

  • MD5

    ce0f93d2bb7f18632d6695cf4800f436

  • SHA1

    c36922e5580cf622752115f2c8fa95278ad455a7

  • SHA256

    9624e9bf93ace2e4b9106fb1b30c1dfb9de68bf63f4fb9559f11078569fbe334

  • SHA512

    df13fbc9df58029868f442b84f5b24cea6cab0fe019898dce524ed99876642db4ae0ad2226d35c7fa75f8a43644cfb36d3a9a4ad6c2bfe67ddd9709af604b99b

Score
10/10
redlineinfostealer

Malware Config

Targets

    • Target

      ce0f93d2bb7f18632d6695cf4800f436.exe

    • Size

      1.4MB

    • MD5

      ce0f93d2bb7f18632d6695cf4800f436

    • SHA1

      c36922e5580cf622752115f2c8fa95278ad455a7

    • SHA256

      9624e9bf93ace2e4b9106fb1b30c1dfb9de68bf63f4fb9559f11078569fbe334

    • SHA512

      df13fbc9df58029868f442b84f5b24cea6cab0fe019898dce524ed99876642db4ae0ad2226d35c7fa75f8a43644cfb36d3a9a4ad6c2bfe67ddd9709af604b99b

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks