General
- Target 5B3104DA61BB59A54A1245727B4503AA.exe
- Size 121KB
- Sample210510-2hmkw2df82
- SHA256 19e8e0b137eada5a7e4fe1f41231f5864bea6d99bb158ff0d7f245a4eff9dcf3
- MD5 5b3104da61bb59a54a1245727b4503aa
- SHA1 3c1c3403f4872012700c9d00f58bc54726a59eb8
- SHA512 479567642c719a60acd46f4c5b31c6c243cbd084bb2e320f69eccd1850961df2677b39cf2d3dd60f4953c04b27adb607f486111ec166102fb66218daa68c9fe3
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
5B3104DA61BB59A54A1245727B4503AA.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
5B3104DA61BB59A54A1245727B4503AA.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Targets
-
- Target 5B3104DA61BB59A54A1245727B4503AA.exe
- Size 121KB
- SHA256 19e8e0b137eada5a7e4fe1f41231f5864bea6d99bb158ff0d7f245a4eff9dcf3
- MD5 5b3104da61bb59a54a1245727b4503aa
- SHA1 3c1c3403f4872012700c9d00f58bc54726a59eb8
- SHA512 479567642c719a60acd46f4c5b31c6c243cbd084bb2e320f69eccd1850961df2677b39cf2d3dd60f4953c04b27adb607f486111ec166102fb66218daa68c9fe3
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext