General
-
Target
SecuriteInfo.com.ML.PE-A.3068.27885
-
Size
843KB
-
Sample
210321-prreprstd2
-
MD5
ea37e0ad6b1460d76041ad355621c875
-
SHA1
f8d211eb9c7b1275eec883d4f1fe57ebfa6869d1
-
SHA256
b5ca5c69a95053bc4a01b47da753cdae82afda75b8bd327b1ffc83a63efb443e
-
SHA512
74d24d7085a1077122f6be7b00dd52485498031c5c6c37ca9c50cfa8ada96214853c68e2950f55ed52fc9ba4937ba295352e3c345c70c18d12921bef3b336252
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.ML.PE-A.3068.27885.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
SecuriteInfo.com.ML.PE-A.3068.27885.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
SecuriteInfo.com.ML.PE-A.3068.27885
-
Size
843KB
-
MD5
ea37e0ad6b1460d76041ad355621c875
-
SHA1
f8d211eb9c7b1275eec883d4f1fe57ebfa6869d1
-
SHA256
b5ca5c69a95053bc4a01b47da753cdae82afda75b8bd327b1ffc83a63efb443e
-
SHA512
74d24d7085a1077122f6be7b00dd52485498031c5c6c37ca9c50cfa8ada96214853c68e2950f55ed52fc9ba4937ba295352e3c345c70c18d12921bef3b336252
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-