General
-
Target
978a3ad083a59be05d97c51516616701
-
Size
403KB
-
Sample
240212-tcnp8sbe46
-
MD5
978a3ad083a59be05d97c51516616701
-
SHA1
2cb43a4947f248696235fb7f509803cb82599557
-
SHA256
d1651ca78720e810390fc6e58b13ab1145ac980d1c0972dc16e82536a815432d
-
SHA512
d178c814cabefa3670f154a121d731eca38720f0af6808cb96728149f4a45222f03905c2b576e28be6670128554677ba50e9977fcfb30d323fbedda943066a3b
-
SSDEEP
12288:nhsR1GdX6EYtS0ZnP/bg2t5M+uw34mNS/C7:c1C8maX7
Static task
static1
Behavioral task
behavioral1
Sample
978a3ad083a59be05d97c51516616701.exe
Resource
win7-20231215-en
Malware Config
Extracted
redline
2_8_r
zertypelil.xyz:80
Targets
-
-
Target
978a3ad083a59be05d97c51516616701
-
Size
403KB
-
MD5
978a3ad083a59be05d97c51516616701
-
SHA1
2cb43a4947f248696235fb7f509803cb82599557
-
SHA256
d1651ca78720e810390fc6e58b13ab1145ac980d1c0972dc16e82536a815432d
-
SHA512
d178c814cabefa3670f154a121d731eca38720f0af6808cb96728149f4a45222f03905c2b576e28be6670128554677ba50e9977fcfb30d323fbedda943066a3b
-
SSDEEP
12288:nhsR1GdX6EYtS0ZnP/bg2t5M+uw34mNS/C7:c1C8maX7
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-
Suspicious use of SetThreadContext
-