General
- Target 9e210d931dec7fb3c7ce948fdcdb834d.exe
- Size 904KB
- Sample230527-j95pxabc44
- SHA256 c615b57a74eefbaa313b34fcd75289db5d298d50640f242200044f4a9e7bbe80
- MD5 9e210d931dec7fb3c7ce948fdcdb834d
- SHA1 e1546c717cbfa9c4b7f4181a8e501f461ec2882d
- SHA512 2f72a04bd13b7de8c63ab8b4c811091870457f9a14362002a5fdcbbf8a4fdb2f0a2fd7474789e54ba03fbc2bb5d42e2326d638206aa5f7c08bbd7b00cf5a84e9
- SSDEEP 24576:4SIfBSKSSSSSa663uMQH1Qi5CUbOJg32EWnKRQ1Y:4SIfBSKSSSSSa9ZGQi1OZW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9e210d931dec7fb3c7ce948fdcdb834d.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
9e210d931dec7fb3c7ce948fdcdb834d.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 9e210d931dec7fb3c7ce948fdcdb834d.exe
- Size 904KB
- SHA256 c615b57a74eefbaa313b34fcd75289db5d298d50640f242200044f4a9e7bbe80
- MD5 9e210d931dec7fb3c7ce948fdcdb834d
- SHA1 e1546c717cbfa9c4b7f4181a8e501f461ec2882d
- SHA512 2f72a04bd13b7de8c63ab8b4c811091870457f9a14362002a5fdcbbf8a4fdb2f0a2fd7474789e54ba03fbc2bb5d42e2326d638206aa5f7c08bbd7b00cf5a84e9
- SSDEEP 24576:4SIfBSKSSSSSa663uMQH1Qi5CUbOJg32EWnKRQ1Y:4SIfBSKSSSSSa9ZGQi1OZW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext