General
- Target file.exe
- Size 543KB
- Sample231019-e7n7xseh92
- SHA256 db002710ca8bc5064e07ddedede63c6253e1fc954cf540f199d54d1b00d34b18
- MD5 ed00dfc48a3f2bdaa8711a04732c1341
- SHA1 a30f5f6b850cec7e82ac5e65d471ca1421edbb6d
- SHA512 395f12b4298fe55daf61a59801529457edaf58a7fccd7c5a6b944cb26b7da4066f4cfb413317d4171d8b77b6e5940c90d22d62f784bfda27593c5f8384f37003
- SSDEEP 12288:xqzITaxODYdTlrXcZVSlwIanU7X2VEmmT6/jy:xqzbOMLsZslwTVmT6
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 543KB
- SHA256 db002710ca8bc5064e07ddedede63c6253e1fc954cf540f199d54d1b00d34b18
- MD5 ed00dfc48a3f2bdaa8711a04732c1341
- SHA1 a30f5f6b850cec7e82ac5e65d471ca1421edbb6d
- SHA512 395f12b4298fe55daf61a59801529457edaf58a7fccd7c5a6b944cb26b7da4066f4cfb413317d4171d8b77b6e5940c90d22d62f784bfda27593c5f8384f37003
- SSDEEP 12288:xqzITaxODYdTlrXcZVSlwIanU7X2VEmmT6/jy:xqzbOMLsZslwTVmT6
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext