General

  • Target

    0c0103b124e6832239844096bae291549b4d69b8b026d0ac782b2a7146049d8f

  • Size

    684KB

  • Sample

    240725-maa8sswbjg

  • MD5

    f72116320be7db9c40758491789700fb

  • SHA1

    8d8e9db2ea63b4f1dc0ef694135571003d2e3b08

  • SHA256

    0c0103b124e6832239844096bae291549b4d69b8b026d0ac782b2a7146049d8f

  • SHA512

    b9c6b95628b4323e03f57fb41ece3ddf33c2c1cba24dfb4c4b2563bbacebdaaf5dfa080b22fd9f45bfd3ed0ae19f3274b21530fddc82a310549cc094873bced4

  • SSDEEP

    12288:z2O1vhGM8K82VweO4v9kUl4xV5M/rLc3mzwQaYHG5cb/DS8okN:zXvob8OUlzrY3mYYHnDD1ok

Malware Config

Targets

    • Target

      0c0103b124e6832239844096bae291549b4d69b8b026d0ac782b2a7146049d8f

    • Size

      684KB

    • MD5

      f72116320be7db9c40758491789700fb

    • SHA1

      8d8e9db2ea63b4f1dc0ef694135571003d2e3b08

    • SHA256

      0c0103b124e6832239844096bae291549b4d69b8b026d0ac782b2a7146049d8f

    • SHA512

      b9c6b95628b4323e03f57fb41ece3ddf33c2c1cba24dfb4c4b2563bbacebdaaf5dfa080b22fd9f45bfd3ed0ae19f3274b21530fddc82a310549cc094873bced4

    • SSDEEP

      12288:z2O1vhGM8K82VweO4v9kUl4xV5M/rLc3mzwQaYHG5cb/DS8okN:zXvob8OUlzrY3mYYHnDD1ok

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks