General
- Target file.exe
- Size 448KB
- Sample230922-ck49hsbh2w
- SHA256 cb0ee322bc88fbe0bbf4b5a783bf000e4fa70e526dacfbfcc60c68b61d0a0e99
- MD5 225ee3e5207d801d26b53bb20b5eb115
- SHA1 508d1326193c8742c1b78cddfd7491081745844a
- SHA512 415af964415c36bd2f76032df9d726edebbfad3c9d81a6d2d90b87b8919764203c678e3e6aa778cd525e7cc875738d1074ca0de626adf428a1756c5d667b98dc
- SSDEEP 6144:T2vYg/KfSIBMDgW0L4FWa1yYMOgWQOs+071y6rpz0Vt:9gGSIu8OshYMUQOB6+/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 448KB
- SHA256 cb0ee322bc88fbe0bbf4b5a783bf000e4fa70e526dacfbfcc60c68b61d0a0e99
- MD5 225ee3e5207d801d26b53bb20b5eb115
- SHA1 508d1326193c8742c1b78cddfd7491081745844a
- SHA512 415af964415c36bd2f76032df9d726edebbfad3c9d81a6d2d90b87b8919764203c678e3e6aa778cd525e7cc875738d1074ca0de626adf428a1756c5d667b98dc
- SSDEEP 6144:T2vYg/KfSIBMDgW0L4FWa1yYMOgWQOs+071y6rpz0Vt:9gGSIu8OshYMUQOB6+/
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext