General
-
Target
e269cb9c6b2dbaae9cd7c3d836299b36c76781b14e1d3081c0cf932fd307ee52
-
Size
242KB
-
Sample
220308-a9m1esaad7
-
MD5
f5c513778e009c0f8650943545b8a7e7
-
SHA1
65059f11208cfdf48174c1b09710781d7abbd3db
-
SHA256
e269cb9c6b2dbaae9cd7c3d836299b36c76781b14e1d3081c0cf932fd307ee52
-
SHA512
461f565c063fbbc0716756208c704320bd223bcc02c033533367d755f96549df1eb8080099d74252b7e28fcc752f7f3207d74bbb877412f8d09bca0d7e3d6c35
Static task
static1
Behavioral task
behavioral1
Sample
e269cb9c6b2dbaae9cd7c3d836299b36c76781b14e1d3081c0cf932fd307ee52.exe
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
e269cb9c6b2dbaae9cd7c3d836299b36c76781b14e1d3081c0cf932fd307ee52.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
redline
youtube
videdoshin.xyz:80
Targets
-
-
Target
e269cb9c6b2dbaae9cd7c3d836299b36c76781b14e1d3081c0cf932fd307ee52
-
Size
242KB
-
MD5
f5c513778e009c0f8650943545b8a7e7
-
SHA1
65059f11208cfdf48174c1b09710781d7abbd3db
-
SHA256
e269cb9c6b2dbaae9cd7c3d836299b36c76781b14e1d3081c0cf932fd307ee52
-
SHA512
461f565c063fbbc0716756208c704320bd223bcc02c033533367d755f96549df1eb8080099d74252b7e28fcc752f7f3207d74bbb877412f8d09bca0d7e3d6c35
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext
-