General
-
Target
e4a200fc3da152d2b8c48f6e19b8ec97
-
Size
787KB
-
Sample
210914-2kz28sbddq
-
MD5
e4a200fc3da152d2b8c48f6e19b8ec97
-
SHA1
6104b851cccad3628b12d4ca136b8f364bbd3d35
-
SHA256
95d29f64d0106c91070bcd511f78f6cf29d35cdb8cbbd97cfdfdcf61e422b4da
-
SHA512
d704391d9a566a889398af1d119e46aecfa9421802cb14785847a64d4848874f2b65aed132d955f624a848fead5b2cb48a9805c90d5df2e230064775f6f015ea
Static task
static1
Behavioral task
behavioral1
Sample
e4a200fc3da152d2b8c48f6e19b8ec97.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
e4a200fc3da152d2b8c48f6e19b8ec97.exe
Resource
win10-en
Malware Config
Extracted
redline
cheat
172.31.9.183:29120
Targets
-
-
Target
e4a200fc3da152d2b8c48f6e19b8ec97
-
Size
787KB
-
MD5
e4a200fc3da152d2b8c48f6e19b8ec97
-
SHA1
6104b851cccad3628b12d4ca136b8f364bbd3d35
-
SHA256
95d29f64d0106c91070bcd511f78f6cf29d35cdb8cbbd97cfdfdcf61e422b4da
-
SHA512
d704391d9a566a889398af1d119e46aecfa9421802cb14785847a64d4848874f2b65aed132d955f624a848fead5b2cb48a9805c90d5df2e230064775f6f015ea
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext
-