General
- Target e4a200fc3da152d2b8c48f6e19b8ec97
- Size 787KB
- Sample210914-2kz28sbddq
- SHA256 95d29f64d0106c91070bcd511f78f6cf29d35cdb8cbbd97cfdfdcf61e422b4da
- MD5 e4a200fc3da152d2b8c48f6e19b8ec97
- SHA1 6104b851cccad3628b12d4ca136b8f364bbd3d35
- SHA512 d704391d9a566a889398af1d119e46aecfa9421802cb14785847a64d4848874f2b65aed132d955f624a848fead5b2cb48a9805c90d5df2e230064775f6f015ea
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
e4a200fc3da152d2b8c48f6e19b8ec97.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
e4a200fc3da152d2b8c48f6e19b8ec97.exe
Resource
win10-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
cheat
C2
-
172.31.9.183:29120
Targets
-
- Target e4a200fc3da152d2b8c48f6e19b8ec97
- Size 787KB
- SHA256 95d29f64d0106c91070bcd511f78f6cf29d35cdb8cbbd97cfdfdcf61e422b4da
- MD5 e4a200fc3da152d2b8c48f6e19b8ec97
- SHA1 6104b851cccad3628b12d4ca136b8f364bbd3d35
- SHA512 d704391d9a566a889398af1d119e46aecfa9421802cb14785847a64d4848874f2b65aed132d955f624a848fead5b2cb48a9805c90d5df2e230064775f6f015ea
- MD5 SHA1 SHA512
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine Payload
Suspicious use of SetThreadContext