Overview

overview

10

Static

static

3

Setupppp.rar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setupppp.rar

  • Size

    2.7MB

  • Sample

    230607-z7skkagf2w

  • MD5

    b92274784508801cc505787210efecc7

  • SHA1

    edddb4e063c4c1b06de759479bc368817601e6c3

  • SHA256

    9d7429145a7643272e55fb1e756582ea9e3dd2daf182c518ee9816f44d81cf81

  • SHA512

    e0b2bd505e515eb6c0f9d303cc3d3fc3797a23d36c38e43ff46e808bd4b920e6ea2f5b2fe7e836a4b4ff2a555956e2e8bac379ee63ccbe75fac9a5ced63d034c

  • SSDEEP

    49152:i+7Kh+VRGEfU4z0J3VVHTych7Rwy0KputAmb6iqnOyG/0Onc63bg:iiKhcGMcfHTygl0uutJzfg

Score
10/10
redlineinfostealerspyware

Malware Config

Targets

    • Target

      Setupppp.rar

    • Size

      2.7MB

    • MD5

      b92274784508801cc505787210efecc7

    • SHA1

      edddb4e063c4c1b06de759479bc368817601e6c3

    • SHA256

      9d7429145a7643272e55fb1e756582ea9e3dd2daf182c518ee9816f44d81cf81

    • SHA512

      e0b2bd505e515eb6c0f9d303cc3d3fc3797a23d36c38e43ff46e808bd4b920e6ea2f5b2fe7e836a4b4ff2a555956e2e8bac379ee63ccbe75fac9a5ced63d034c

    • SSDEEP

      49152:i+7Kh+VRGEfU4z0J3VVHTych7Rwy0KputAmb6iqnOyG/0Onc63bg:iiKhcGMcfHTygl0uutJzfg

    Score
    10/10
    redlineinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Executes dropped EXE

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks