General
- Target f8f7c8c4cc25ba49c5b591aab8bfdc04.exe
- Size 1.7MB
- Sample230801-3m9vwsch41
- SHA256 67cd8472366ecda8a195fc8a44e4747429f8d2e6d8c16d0c15a0e5a500506feb
- MD5 f8f7c8c4cc25ba49c5b591aab8bfdc04
- SHA1 6ed43db5ba58257c1283abfa8a08290ccf896033
- SHA512 6e7fbd61fdf4cdcfed8f78a4d2272bb204bbd579cec94c4a45569bef9c5c62be22117545030a91291cae0cee6dea7454ab57fa16907d26d9a39cd7275bdbb9b5
- SSDEEP 24576:XJKheI128AofpfewMUGeIFtOVkWvhr/qSJ:zIs8AofpfcfFavFz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
f8f7c8c4cc25ba49c5b591aab8bfdc04.exe
Resource
win7-20230712-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
f8f7c8c4cc25ba49c5b591aab8bfdc04.exe
Resource
win10v2004-20230703-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target f8f7c8c4cc25ba49c5b591aab8bfdc04.exe
- Size 1.7MB
- SHA256 67cd8472366ecda8a195fc8a44e4747429f8d2e6d8c16d0c15a0e5a500506feb
- MD5 f8f7c8c4cc25ba49c5b591aab8bfdc04
- SHA1 6ed43db5ba58257c1283abfa8a08290ccf896033
- SHA512 6e7fbd61fdf4cdcfed8f78a4d2272bb204bbd579cec94c4a45569bef9c5c62be22117545030a91291cae0cee6dea7454ab57fa16907d26d9a39cd7275bdbb9b5
- SSDEEP 24576:XJKheI128AofpfewMUGeIFtOVkWvhr/qSJ:zIs8AofpfcfFavFz
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext