General
- Target e5be7e226866ea3a1b5f753dcec8d5a6.exe
- Size 365KB
- Sample210720-252tyw3as2
- SHA256 2d82513250044d2b18f1e5a264ef0c7ce8d49f80f9cc613dfeb2a54b9839aef1
- MD5 e5be7e226866ea3a1b5f753dcec8d5a6
- SHA1 fc3a8c957547f7b125046ac880e2a8f8e18af793
- SHA512 8b54ea29281fd5222b3ea9541ac8687319bbf2019bcb468e4bbfa4b3bbd803bb87763a5b540e9164a52f8b675ea3ab9023b5d797e4c6c8f839be2b267347f6e5
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
e5be7e226866ea3a1b5f753dcec8d5a6.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
e5be7e226866ea3a1b5f753dcec8d5a6.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
BOG_2.0
C2
-
45.14.49.91:60919
Targets
-
- Target e5be7e226866ea3a1b5f753dcec8d5a6.exe
- Size 365KB
- SHA256 2d82513250044d2b18f1e5a264ef0c7ce8d49f80f9cc613dfeb2a54b9839aef1
- MD5 e5be7e226866ea3a1b5f753dcec8d5a6
- SHA1 fc3a8c957547f7b125046ac880e2a8f8e18af793
- SHA512 8b54ea29281fd5222b3ea9541ac8687319bbf2019bcb468e4bbfa4b3bbd803bb87763a5b540e9164a52f8b675ea3ab9023b5d797e4c6c8f839be2b267347f6e5
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext