General
-
Target
964888a647afc8f0824530d9a51f973446b46726ba7e471c38dbff503b400d73
-
Size
2.7MB
-
Sample
220215-jvak8adhdr
-
MD5
2c5de97e118858080273150c0d452789
-
SHA1
da9f3e19934fb9713ea3c1112deb9eb291cfcd3d
-
SHA256
964888a647afc8f0824530d9a51f973446b46726ba7e471c38dbff503b400d73
-
SHA512
41f2aa24b5e1caa5559955997803bd7d84d13f273bd519f06e1a4eb98a743a2a4ed1808a0d7fed90e69fb1d13e6c878ae203f6370c764e4e4da2fe981ebf2600
Static task
static1
Behavioral task
behavioral1
Sample
964888a647afc8f0824530d9a51f973446b46726ba7e471c38dbff503b400d73.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
964888a647afc8f0824530d9a51f973446b46726ba7e471c38dbff503b400d73.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
964888a647afc8f0824530d9a51f973446b46726ba7e471c38dbff503b400d73
-
Size
2.7MB
-
MD5
2c5de97e118858080273150c0d452789
-
SHA1
da9f3e19934fb9713ea3c1112deb9eb291cfcd3d
-
SHA256
964888a647afc8f0824530d9a51f973446b46726ba7e471c38dbff503b400d73
-
SHA512
41f2aa24b5e1caa5559955997803bd7d84d13f273bd519f06e1a4eb98a743a2a4ed1808a0d7fed90e69fb1d13e6c878ae203f6370c764e4e4da2fe981ebf2600
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-