General

  • Target
    arm7-20220504-1137
  • Size 52KB
  • Sample220504-nrpyysgdbk
  • SHA256 fd7f4aecfab8d0ca292ee84af29c9f6ab0cfb9dcfd1cdb0ee1e9a04a788387f3
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      arm7-20220504-1137
    • Size 52KB
    • SHA256 fd7f4aecfab8d0ca292ee84af29c9f6ab0cfb9dcfd1cdb0ee1e9a04a788387f3
    • MD5 SHA1 SHA512
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Contacts a large (115672) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks