General
- Target file.exe
- Size 1.8MB
- Sample231002-v397ladb9z
- SHA256 a256cdcf68d1a64bdb3db85f88ec27da75a032f338d8740cffcbdf66b85f9d74
- MD5 34169ffd8ff8d920d8f7c9e80c3c6c87
- SHA1 4a930342a05d212ffbbd5926e46a72db6535b40f
- SHA512 46cb1b3f470f90b5ef75235765a532ba53a391685ed7dc415421f1390b8de8d42e9dda6b5e6f02f074764be6275c93f9262f77a0603bad068cd135eb00ec565b
- SSDEEP 24576:vqwDJXe9Dz+HV5bIUnygszbboMXDZgdi5wI13:v89Dz+Hf1nMwMTZgdC1
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 1.8MB
- SHA256 a256cdcf68d1a64bdb3db85f88ec27da75a032f338d8740cffcbdf66b85f9d74
- MD5 34169ffd8ff8d920d8f7c9e80c3c6c87
- SHA1 4a930342a05d212ffbbd5926e46a72db6535b40f
- SHA512 46cb1b3f470f90b5ef75235765a532ba53a391685ed7dc415421f1390b8de8d42e9dda6b5e6f02f074764be6275c93f9262f77a0603bad068cd135eb00ec565b
- SSDEEP 24576:vqwDJXe9Dz+HV5bIUnygszbboMXDZgdi5wI13:v89Dz+Hf1nMwMTZgdC1
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext