General
- Target 43B76904F981BDBB4BA498774D61B8B2.exe
- Size 660KB
- Sample210502-5479exqfxe
- SHA256 ccb3f33850b9cb5b09591cbf7aa2ede80c3b79a497e32e295e624651c1cbb526
- MD5 43b76904f981bdbb4ba498774d61b8b2
- SHA1 f650bb4c726d997834c92aab205834d105ed91fa
- SHA512 8f8fe539978c412ea0b648d72b718157108e22889ada66436ba5018ce7b3a9bf598c121c7b1165ec4169d4c88b865ae86a206949f7e87ff39f609e3bff3ee4a6
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
43B76904F981BDBB4BA498774D61B8B2.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
43B76904F981BDBB4BA498774D61B8B2.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Triple Kill
C2
-
junglespirit.xyz:5006
Targets
-
- Target 43B76904F981BDBB4BA498774D61B8B2.exe
- Size 660KB
- SHA256 ccb3f33850b9cb5b09591cbf7aa2ede80c3b79a497e32e295e624651c1cbb526
- MD5 43b76904f981bdbb4ba498774d61b8b2
- SHA1 f650bb4c726d997834c92aab205834d105ed91fa
- SHA512 8f8fe539978c412ea0b648d72b718157108e22889ada66436ba5018ce7b3a9bf598c121c7b1165ec4169d4c88b865ae86a206949f7e87ff39f609e3bff3ee4a6
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext