General
- Target SecuriteInfo.com.Variant.Strictor.266103.12938.22706
- Size 738KB
- Sample220801-jm45vsebb5
- SHA256 9b052ef22068f9facd152eaf51792d60012ac758d4bcacd43ad8bdcaa6684dd3
- MD5 6dc36ba56da3d55331693915c48f1dd0
- SHA1 ae1b5298c6a31e585936c65c4cdc05ddea3e63c7
- SHA512 98f8459ab26b33e03452319fe18cf4365bcbaad6338a841a7f8bc78f79ae147604ab69a2f5dc0a9834c4bc828d8299022e4618e9553d7d2dc249237247ff1727
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Strictor.266103.12938.exe
Resource
win7-20220718-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Strictor.266103.12938.exe
Resource
win10v2004-20220721-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
XL
C2
-
163.123.143.229:50230
Targets
-
- Target SecuriteInfo.com.Variant.Strictor.266103.12938.22706
- Size 738KB
- SHA256 9b052ef22068f9facd152eaf51792d60012ac758d4bcacd43ad8bdcaa6684dd3
- MD5 6dc36ba56da3d55331693915c48f1dd0
- SHA1 ae1b5298c6a31e585936c65c4cdc05ddea3e63c7
- SHA512 98f8459ab26b33e03452319fe18cf4365bcbaad6338a841a7f8bc78f79ae147604ab69a2f5dc0a9834c4bc828d8299022e4618e9553d7d2dc249237247ff1727
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext