General
- Target 4096b746fb975c1edbcb9b4d529b7b22.exe
- Size 1.6MB
- Sample210418-ny5b6nyppx
- SHA256 f9a7e1e888fadb9d98e593d75f1b76b0809721ad7efbd9882a9a88d45588ceb6
- MD5 4096b746fb975c1edbcb9b4d529b7b22
- SHA1 87693cd2c09bbe428bb817f9b850d4204a6eb52e
- SHA512 a37d421aed996ce4a1f5864b432d348437d28b5271cff048520a7b2c76cea35e468b61bfc950b6d4c7a78b8e5e6772965cf94b06abf381ee57442b880b1dca85
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
4096b746fb975c1edbcb9b4d529b7b22.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4096b746fb975c1edbcb9b4d529b7b22.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Targets
-
- Target 4096b746fb975c1edbcb9b4d529b7b22.exe
- Size 1.6MB
- SHA256 f9a7e1e888fadb9d98e593d75f1b76b0809721ad7efbd9882a9a88d45588ceb6
- MD5 4096b746fb975c1edbcb9b4d529b7b22
- SHA1 87693cd2c09bbe428bb817f9b850d4204a6eb52e
- SHA512 a37d421aed996ce4a1f5864b432d348437d28b5271cff048520a7b2c76cea35e468b61bfc950b6d4c7a78b8e5e6772965cf94b06abf381ee57442b880b1dca85
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext