Overview

overview

10

Static

static

3

d6702ffbfc...JC.exe

windows7-x64

10

d6702ffbfc...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6702ffbfccb1f8aaa0e40c39a2257f0da03fdbff4b9aeb528156e316d6b0701_JC.exe

  • Size

    1.2MB

  • Sample

    231011-gpddtadd2w

  • MD5

    8e26aa0c4f94144699e890897aa7342a

  • SHA1

    0139d4b7261eded25fff6f9357eb876ad88ac9ea

  • SHA256

    d6702ffbfccb1f8aaa0e40c39a2257f0da03fdbff4b9aeb528156e316d6b0701

  • SHA512

    f2879dec7ed08b1083538428062e9d2e8ef464492b70a15dcbc8bc1a1ff8b6697aa82ce8eb0f5a2842955096c527c6f953c5bab5e530d7384641868dd13d15b1

  • SSDEEP

    24576:kMZ/4+PJAzxy99wINGGnAia8DmCJhSOh8TMnV:kMZ/4+uy99wIEGJyEhXwQ

Score
10/10
redlineinfostealerspyware

Malware Config

Targets

    • Target

      d6702ffbfccb1f8aaa0e40c39a2257f0da03fdbff4b9aeb528156e316d6b0701_JC.exe

    • Size

      1.2MB

    • MD5

      8e26aa0c4f94144699e890897aa7342a

    • SHA1

      0139d4b7261eded25fff6f9357eb876ad88ac9ea

    • SHA256

      d6702ffbfccb1f8aaa0e40c39a2257f0da03fdbff4b9aeb528156e316d6b0701

    • SHA512

      f2879dec7ed08b1083538428062e9d2e8ef464492b70a15dcbc8bc1a1ff8b6697aa82ce8eb0f5a2842955096c527c6f953c5bab5e530d7384641868dd13d15b1

    • SSDEEP

      24576:kMZ/4+PJAzxy99wINGGnAia8DmCJhSOh8TMnV:kMZ/4+uy99wIEGJyEhXwQ

    Score
    10/10
    redlineinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Uses the VBS compiler for execution

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks