General

  • Target

    501c46430b4dce94fcb74d106fa5cd3c2185b8983b4340acd34f5d0a16bdb1c0

  • Size

    635KB

  • Sample

    231124-1ve95sed73

  • MD5

    2ca2923dd94d48a56d8bd1154fba0eeb

  • SHA1

    c907cdbce508518cab1e125370c7f738d7b911c8

  • SHA256

    501c46430b4dce94fcb74d106fa5cd3c2185b8983b4340acd34f5d0a16bdb1c0

  • SHA512

    c3ab6ae4bba013e1416edce61d7520147f1bba8a0bb63344ac0c0a38f74723ef51d00e3a5d8a59abe16e6b40da484034a1c210e23283c6f3e376eef97e466e45

  • SSDEEP

    12288:iHHgXtb7A4pD4TmDaDU/6NL3tP6adY7EeYdjSPr/YzC:gYtb7DpUqDWW667ClSjg+

Score
10/10

Malware Config

Targets

    • Target

      501c46430b4dce94fcb74d106fa5cd3c2185b8983b4340acd34f5d0a16bdb1c0

    • Size

      635KB

    • MD5

      2ca2923dd94d48a56d8bd1154fba0eeb

    • SHA1

      c907cdbce508518cab1e125370c7f738d7b911c8

    • SHA256

      501c46430b4dce94fcb74d106fa5cd3c2185b8983b4340acd34f5d0a16bdb1c0

    • SHA512

      c3ab6ae4bba013e1416edce61d7520147f1bba8a0bb63344ac0c0a38f74723ef51d00e3a5d8a59abe16e6b40da484034a1c210e23283c6f3e376eef97e466e45

    • SSDEEP

      12288:iHHgXtb7A4pD4TmDaDU/6NL3tP6adY7EeYdjSPr/YzC:gYtb7DpUqDWW667ClSjg+

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks