General

  • Target
    5B3104DA61BB59A54A1245727B4503AA.exe
  • Size 121KB
  • Sample210510-2hmkw2df82
  • SHA256 19e8e0b137eada5a7e4fe1f41231f5864bea6d99bb158ff0d7f245a4eff9dcf3
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      5B3104DA61BB59A54A1245727B4503AA.exe
    • Size 121KB
    • SHA256 19e8e0b137eada5a7e4fe1f41231f5864bea6d99bb158ff0d7f245a4eff9dcf3
    • MD5 SHA1 SHA512
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks