Overview

overview

10

Static

static

98effa1479...c7.exe

windows7_x64

10

98effa1479...c7.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    98effa147916ddfa55103f6d439fb5c7
  • Size 614KB
  • Sample220324-1bw4jsbchm
  • SHA256 eb3069a13ee9020b0bf6675bdb70c92e67c5b7eeb17f882df4c7f2629047ff02
  • MD5 SHA1 SHA512
Score
10/10
redlineinfostealerspyware

Malware Config

Extracted

Family

  • redline

C2

  • 62.204.41.141:24758

Attributes
  • auth_value

    5ac602c152cb8163381bbfa626204215

Targets

    • Target
      98effa147916ddfa55103f6d439fb5c7
    • Size 614KB
    • SHA256 eb3069a13ee9020b0bf6675bdb70c92e67c5b7eeb17f882df4c7f2629047ff02
    • MD5 SHA1 SHA512
    Score
    10/10
    redlineinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks