General
- Target 96ff8ba929c9de23b8c3aaafd9e32165
- Size 432KB
- Sample210919-vbnvaaehck
- SHA256 d5a7c6129c06b47ea91b7f93b0f3f424cfa641e6afbd6ceb95e559850270fd22
- MD5 96ff8ba929c9de23b8c3aaafd9e32165
- SHA1 5dede9263435a4983483d6bba00e7525ca3b67d3
- SHA512 f22fad273f08834e6fd3e3bb4815e6b4d90642944abbf4efb3344e5685b23dee33f5c3de60cdeceb2442e457f2def72336c6904ea609873e47aed9410633f629
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
96ff8ba929c9de23b8c3aaafd9e32165.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
96ff8ba929c9de23b8c3aaafd9e32165.exe
Resource
win10-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
louise14
C2
-
193.188.21.209:41939
Targets
-
- Target 96ff8ba929c9de23b8c3aaafd9e32165
- Size 432KB
- SHA256 d5a7c6129c06b47ea91b7f93b0f3f424cfa641e6afbd6ceb95e559850270fd22
- MD5 96ff8ba929c9de23b8c3aaafd9e32165
- SHA1 5dede9263435a4983483d6bba00e7525ca3b67d3
- SHA512 f22fad273f08834e6fd3e3bb4815e6b4d90642944abbf4efb3344e5685b23dee33f5c3de60cdeceb2442e457f2def72336c6904ea609873e47aed9410633f629
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext