Overview

overview

10

Static

static

3

7fd444dae9...de.exe

windows7-x64

10

7fd444dae9...de.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7fd444dae9993f000c25c1948669a25f851aa9559f7feaa570e66f5f94b457de

  • Size

    1.5MB

  • Sample

    231012-ps5lgaad2y

  • MD5

    578f82576563fbb7b0b50054c8ea2c7a

  • SHA1

    2b78dd3a97c214455373b257a66298aeb072819e

  • SHA256

    7fd444dae9993f000c25c1948669a25f851aa9559f7feaa570e66f5f94b457de

  • SHA512

    5ef71babc9d2b0a5e3c009a1a98d82b9d54d77192d7844c77b27eb7eec251b589b60940ea7a25ad9e2e8fd3abcae2a363d0c3e6f3b56810c796668717bc025a3

  • SSDEEP

    24576:agFyLp1HmYObUrsibw/ZPv2zlKte5uFoRq96:VYHmYObaYdv2zlKZJ

Score
10/10
redlineinfostealer

Malware Config

Targets

    • Target

      7fd444dae9993f000c25c1948669a25f851aa9559f7feaa570e66f5f94b457de

    • Size

      1.5MB

    • MD5

      578f82576563fbb7b0b50054c8ea2c7a

    • SHA1

      2b78dd3a97c214455373b257a66298aeb072819e

    • SHA256

      7fd444dae9993f000c25c1948669a25f851aa9559f7feaa570e66f5f94b457de

    • SHA512

      5ef71babc9d2b0a5e3c009a1a98d82b9d54d77192d7844c77b27eb7eec251b589b60940ea7a25ad9e2e8fd3abcae2a363d0c3e6f3b56810c796668717bc025a3

    • SSDEEP

      24576:agFyLp1HmYObUrsibw/ZPv2zlKte5uFoRq96:VYHmYObaYdv2zlKZJ

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks