General
- Target a51962c811cef391bcead6f277350749.exe
- Size 172KB
- Sample210517-ajfkbcey4a
- SHA256 ece0b9c8ead01801f20d8b3ab5b66bb42f4c06dd7d3e5f14ae6a4df0c3ea890b
- MD5 a51962c811cef391bcead6f277350749
- SHA1 48a3f22429af5480abc734b05af1371bd1108b4c
- SHA512 1e701fbbce7541d5523eaa0479eb827dd89a5124d124e0cfeccf032eb929eb12de0354329fa01b5151a070616e6f2285c233a7e6129103b3dd90cd7a94960b91
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
a51962c811cef391bcead6f277350749.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a51962c811cef391bcead6f277350749.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Targets
-
- Target a51962c811cef391bcead6f277350749.exe
- Size 172KB
- SHA256 ece0b9c8ead01801f20d8b3ab5b66bb42f4c06dd7d3e5f14ae6a4df0c3ea890b
- MD5 a51962c811cef391bcead6f277350749
- SHA1 48a3f22429af5480abc734b05af1371bd1108b4c
- SHA512 1e701fbbce7541d5523eaa0479eb827dd89a5124d124e0cfeccf032eb929eb12de0354329fa01b5151a070616e6f2285c233a7e6129103b3dd90cd7a94960b91
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext