General
- Target arm7-20220504-1137
- Size 52KB
- Sample220504-nrpyysgdbk
- SHA256 fd7f4aecfab8d0ca292ee84af29c9f6ab0cfb9dcfd1cdb0ee1e9a04a788387f3
- MD5 5163d57aa2d1102881b188f0bd45f78a
- SHA1 6062cddc2facf238bbec9d634caafd943544188a
- SHA512 2419804c17878387aa0c1a0c2da8669c109c4645be183caf1657f61682242735ba0514cabea13c5bbef7c1bcadf0ee9c2ba5363bd8e69529e8a3a395c1a2ff80
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
arm7-20220504-1137
Resource
debian9-armhf-en-20211208
0 signatures
0 seconds
Malware Config
Targets
-
- Target arm7-20220504-1137
- Size 52KB
- SHA256 fd7f4aecfab8d0ca292ee84af29c9f6ab0cfb9dcfd1cdb0ee1e9a04a788387f3
- MD5 5163d57aa2d1102881b188f0bd45f78a
- SHA1 6062cddc2facf238bbec9d634caafd943544188a
- SHA512 2419804c17878387aa0c1a0c2da8669c109c4645be183caf1657f61682242735ba0514cabea13c5bbef7c1bcadf0ee9c2ba5363bd8e69529e8a3a395c1a2ff80
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Contacts a large (115672) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Reads runtime system information
Reads data from /proc virtual filesystem.