Overview

overview

10

Static

static

3

df13374be9...JC.exe

windows7-x64

10

df13374be9...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    df13374be948b1cd0a80f334f42d467846475b5c3427227df4c37b67fa648608_JC.exe

  • Size

    1.2MB

  • Sample

    231014-ejw8mafd4t

  • MD5

    2c7463cfe3d7089951dde9eccdf037bf

  • SHA1

    441e7938cebba5d2324850010a0dcbeec3643b8a

  • SHA256

    df13374be948b1cd0a80f334f42d467846475b5c3427227df4c37b67fa648608

  • SHA512

    5a36f9c46ee184bb1fade4a7a2a1cbf27537357bf7d030d2fe393f3939b9d157c0fdd49869623522f4d36c71224452378dd688d2db6d85596ba396a67fb752a0

  • SSDEEP

    24576:TUTmHorinrJRkaaiEyKA6aCBZAoQ11eS:8enrJRkOljAI11eS

Score
10/10
redlineinfostealer

Malware Config

Targets

    • Target

      df13374be948b1cd0a80f334f42d467846475b5c3427227df4c37b67fa648608_JC.exe

    • Size

      1.2MB

    • MD5

      2c7463cfe3d7089951dde9eccdf037bf

    • SHA1

      441e7938cebba5d2324850010a0dcbeec3643b8a

    • SHA256

      df13374be948b1cd0a80f334f42d467846475b5c3427227df4c37b67fa648608

    • SHA512

      5a36f9c46ee184bb1fade4a7a2a1cbf27537357bf7d030d2fe393f3939b9d157c0fdd49869623522f4d36c71224452378dd688d2db6d85596ba396a67fb752a0

    • SSDEEP

      24576:TUTmHorinrJRkaaiEyKA6aCBZAoQ11eS:8enrJRkOljAI11eS

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks