Overview

overview

10

Static

static

1

bd225935b6...40.exe

windows7-x64

10

bd225935b6...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bd225935b6b2ea18b54d886175ff37be05a0bea5dc242ee7b535fbc0b6117140

  • Size

    1.5MB

  • Sample

    231012-wa5l3seg7s

  • MD5

    c2a12d49dfe6eee829e756f23da12892

  • SHA1

    9aaabbad78b1b78d4be89e54b6aa54e64530f962

  • SHA256

    bd225935b6b2ea18b54d886175ff37be05a0bea5dc242ee7b535fbc0b6117140

  • SHA512

    cc724df549003bfe96831da5d08a4e94fcc9cf50421851215b60d0f343be06adf17e8a982ded2853175d4c1eb9ac0fa876379bcb8935680809ebf61c321e0193

  • SSDEEP

    49152:0YHmYObiYdcFMSz3gbXyiz3htazmq7H1P:0kOoMSz3gbXyiz3htwV

Score
10/10
redlineinfostealerspyware

Malware Config

Targets

    • Target

      bd225935b6b2ea18b54d886175ff37be05a0bea5dc242ee7b535fbc0b6117140

    • Size

      1.5MB

    • MD5

      c2a12d49dfe6eee829e756f23da12892

    • SHA1

      9aaabbad78b1b78d4be89e54b6aa54e64530f962

    • SHA256

      bd225935b6b2ea18b54d886175ff37be05a0bea5dc242ee7b535fbc0b6117140

    • SHA512

      cc724df549003bfe96831da5d08a4e94fcc9cf50421851215b60d0f343be06adf17e8a982ded2853175d4c1eb9ac0fa876379bcb8935680809ebf61c321e0193

    • SSDEEP

      49152:0YHmYObiYdcFMSz3gbXyiz3htazmq7H1P:0kOoMSz3gbXyiz3htwV

    Score
    10/10
    redlineinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Uses the VBS compiler for execution

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks