General

  • Target

    865c50b2fedb18ff0c1e980d0cde585ee46b273940f99f4f4d3d1554a590b2d8.zip

  • Size

    3.2MB

  • Sample

    230329-qcqytagd49

  • MD5

    5db5eb41708c481929bd9a9727553240

  • SHA1

    ba7e2dd3f9485d5989d3cae1a904079e8cc796f2

  • SHA256

    0164489c74a6ddb538c76417c4ecb2c6cc6c156e05f42c072d3aae347715285e

  • SHA512

    4cf5603f794bb62cd1afdf43a4847bb04e964b9fd9524605b6ab42c99d9ed360aa777d9d81359eb3767de9d4750aefc658f60a22a4879ed3ae532f22a2aa2412

  • SSDEEP

    49152:tvj9sDDMm01mARiJwyrlc+c+ytFiyethtDHUQdvNZa8lJSx18NaEsGDFcfNmwOp0:2GXowV2r5HUQ5cx19EsGDFc2bFrn3n4

Malware Config

Targets

    • Target

      865c50b2fedb18ff0c1e980d0cde585ee46b273940f99f4f4d3d1554a590b2d8

    • Size

      3.4MB

    • MD5

      5eddad675b78c72186b9c6117b422d33

    • SHA1

      fff85f0e10e3f2c5af280bea9075722310726982

    • SHA256

      865c50b2fedb18ff0c1e980d0cde585ee46b273940f99f4f4d3d1554a590b2d8

    • SHA512

      2655d88a96185c751c195d76acd9981672b54c06908af515036dc904089cbe964c264640b27a77194152976486e88946e691d97dab43f22bf08968b6dd7bee90

    • SSDEEP

      98304:Grn6QUfH+eDSA04JF1LjgdCgXU+YXUAzALV:S6QUfPSJCYJTYZzAR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

MITRE ATT&CK Matrix

Tasks