Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c2848940a1061195786910709273d326d8f08fd6649636e147a41d5f8c43456b

  • Size

    460KB

  • Sample

    230528-19w67shb8x

  • MD5

    2e0ccd3920136b4acdd36c0206bf12ec

  • SHA1

    ce4b720a56660f900db79ffb062af49437933510

  • SHA256

    c2848940a1061195786910709273d326d8f08fd6649636e147a41d5f8c43456b

  • SHA512

    368b65ab4924e609f70dc9e939125a3e807e558b60a91f22bf7fd88e58685f8570f50bf3fccf04ca2876213d13da3e3781ff2ae3ff2aeb9fa5fe72f7bf07e968

  • SSDEEP

    6144:QUHKeJmJtctxr8n8gFQLKSKOckKJivslFiO4hYY1fE0/SRTVWp367pV/rYwyB:kkfbepF0Y2c0/SRTUp3zw

Score
10/10
redlineinfostealerspyware

Malware Config

Targets

    • Target

      c2848940a1061195786910709273d326d8f08fd6649636e147a41d5f8c43456b

    • Size

      460KB

    • MD5

      2e0ccd3920136b4acdd36c0206bf12ec

    • SHA1

      ce4b720a56660f900db79ffb062af49437933510

    • SHA256

      c2848940a1061195786910709273d326d8f08fd6649636e147a41d5f8c43456b

    • SHA512

      368b65ab4924e609f70dc9e939125a3e807e558b60a91f22bf7fd88e58685f8570f50bf3fccf04ca2876213d13da3e3781ff2ae3ff2aeb9fa5fe72f7bf07e968

    • SSDEEP

      6144:QUHKeJmJtctxr8n8gFQLKSKOckKJivslFiO4hYY1fE0/SRTVWp367pV/rYwyB:kkfbepF0Y2c0/SRTUp3zw

    Score
    10/10
    redlineinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks