General

  • Target

    Yuqu_v_7.99.zip

  • Size

    176KB

  • Sample

    240525-tbqs7shf6w

  • MD5

    21d3c6b5b66978324659c4511ad2a8e8

  • SHA1

    4177433947b8c207e860fc02c054ad53f1583ea7

  • SHA256

    d8b0c93bf21a878e805dbbda0d68fc19d02850c8e9336ed8f7d115eb9588d34c

  • SHA512

    34f59ed19f14e8cd212a2efce859413a6ac54b077d31d1b6bf7f23fc4eb7c5b88c623d56c2389d4fb720bb4f47a2d5d11c54d685a4015ea0d9b5d302f71ac4da

  • SSDEEP

    1536:Gi50Y50ZoTgAJuHnjde83Ml83Mn1CyKBKyf6C9XS6zmFMtMd5/an/7l/uAX1WAzH:GiVgAkHnjPIQ6KSEX/07HKC4cg64

Score
10/10

Malware Config

Targets

    • Target

      Yuqu_v_7.99.zip

    • Size

      176KB

    • MD5

      21d3c6b5b66978324659c4511ad2a8e8

    • SHA1

      4177433947b8c207e860fc02c054ad53f1583ea7

    • SHA256

      d8b0c93bf21a878e805dbbda0d68fc19d02850c8e9336ed8f7d115eb9588d34c

    • SHA512

      34f59ed19f14e8cd212a2efce859413a6ac54b077d31d1b6bf7f23fc4eb7c5b88c623d56c2389d4fb720bb4f47a2d5d11c54d685a4015ea0d9b5d302f71ac4da

    • SSDEEP

      1536:Gi50Y50ZoTgAJuHnjde83Ml83Mn1CyKBKyf6C9XS6zmFMtMd5/an/7l/uAX1WAzH:GiVgAkHnjPIQ6KSEX/07HKC4cg64

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks