General
- Target 8218e24698a7118d8377e60c30d92341.exe
- Size 201KB
- Sample230823-ggamysbe41
- SHA256 5459835af56f5d5fd3bf0a3abb1cedc126a63c57eef8c0bcbd797366177a8f0d
- MD5 8218e24698a7118d8377e60c30d92341
- SHA1 0219cab4c3d1203badfc6666ab632ac5c29946f1
- SHA512 21354dd4d9d8df643f8117e7a029361a2368d5ae7f6edace27e8bdb2797aba453b0b003820bfe9391783c847438438ff7b45afe872640dc3befcf1357005d7f6
- SSDEEP 3072:KxLeZ1gif5JlqfrtfugOQU7sJn9XQHwKSMHkZtERVsJtyAip0QMvB:eLNJDVSfkZQQKSmetE+tUp0QMv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8218e24698a7118d8377e60c30d92341.exe
Resource
win7-20230712-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
8218e24698a7118d8377e60c30d92341.exe
Resource
win10v2004-20230703-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 8218e24698a7118d8377e60c30d92341.exe
- Size 201KB
- SHA256 5459835af56f5d5fd3bf0a3abb1cedc126a63c57eef8c0bcbd797366177a8f0d
- MD5 8218e24698a7118d8377e60c30d92341
- SHA1 0219cab4c3d1203badfc6666ab632ac5c29946f1
- SHA512 21354dd4d9d8df643f8117e7a029361a2368d5ae7f6edace27e8bdb2797aba453b0b003820bfe9391783c847438438ff7b45afe872640dc3befcf1357005d7f6
- SSDEEP 3072:KxLeZ1gif5JlqfrtfugOQU7sJn9XQHwKSMHkZtERVsJtyAip0QMvB:eLNJDVSfkZQQKSmetE+tUp0QMv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext