General

  • Target
    4096b746fb975c1edbcb9b4d529b7b22.exe
  • Size 1.6MB
  • Sample210418-ny5b6nyppx
  • SHA256 f9a7e1e888fadb9d98e593d75f1b76b0809721ad7efbd9882a9a88d45588ceb6
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      4096b746fb975c1edbcb9b4d529b7b22.exe
    • Size 1.6MB
    • SHA256 f9a7e1e888fadb9d98e593d75f1b76b0809721ad7efbd9882a9a88d45588ceb6
    • MD5 SHA1 SHA512
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks