General
-
Target
eb259bfda68337866236415d036750c9b86c7d42da60a9d3e4dede079ab80c06
-
Size
1.8MB
-
Sample
240204-d9j6bagfb5
-
MD5
1e24e319a0f190e4c9e5f08c3d920648
-
SHA1
5bf5a38bbd500f58eeac9c2d902d42e6d2b303dc
-
SHA256
eb259bfda68337866236415d036750c9b86c7d42da60a9d3e4dede079ab80c06
-
SHA512
58d0fec523483def27fbbbd8ce9dab69b777b21600fb05edb8a05742daaca1aecea367e6f494520ab1e5264e2775e7ab27176b85677288c216fda6dab1f9b20a
-
SSDEEP
24576:Jitn0rGB77Tmx6ZGAri4PrlFEQ+vW6a9DhvhGEWPT:+77Tmx64AhEQ+vW6a3vYE
Static task
static1
Behavioral task
behavioral1
Sample
eb259bfda68337866236415d036750c9b86c7d42da60a9d3e4dede079ab80c06.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
eb259bfda68337866236415d036750c9b86c7d42da60a9d3e4dede079ab80c06.exe
Resource
win10-20231215-en
Malware Config
Targets
-
-
Target
eb259bfda68337866236415d036750c9b86c7d42da60a9d3e4dede079ab80c06
-
Size
1.8MB
-
MD5
1e24e319a0f190e4c9e5f08c3d920648
-
SHA1
5bf5a38bbd500f58eeac9c2d902d42e6d2b303dc
-
SHA256
eb259bfda68337866236415d036750c9b86c7d42da60a9d3e4dede079ab80c06
-
SHA512
58d0fec523483def27fbbbd8ce9dab69b777b21600fb05edb8a05742daaca1aecea367e6f494520ab1e5264e2775e7ab27176b85677288c216fda6dab1f9b20a
-
SSDEEP
24576:Jitn0rGB77Tmx6ZGAri4PrlFEQ+vW6a9DhvhGEWPT:+77Tmx64AhEQ+vW6a3vYE
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-