General

  • Target

    83a3a61110c288b2340395b47d4565ad00eec2bec1a485a38e89ad79971ca84d

  • Size

    707KB

  • Sample

    240725-sxr3qa1aqd

  • MD5

    3ac106f34da1956df92e61ca140d67f7

  • SHA1

    df95f07d0998c3905ea81fc69e12d4d846dccb04

  • SHA256

    83a3a61110c288b2340395b47d4565ad00eec2bec1a485a38e89ad79971ca84d

  • SHA512

    589eecaa45c1053aec9de3c4c8694fd6c6741ecd142db3a20105a8e914183248126bc6f53860b5cdee374c87eb2800e79409272acda0433dd79a430e0d4271d2

  • SSDEEP

    12288:jg7AIDQUi3+PyOn/ZheylBFkFOqfGS3WiWw1PnyR:jKBDQr3+r6dFOiDPyR

Malware Config

Targets

    • Target

      83a3a61110c288b2340395b47d4565ad00eec2bec1a485a38e89ad79971ca84d

    • Size

      707KB

    • MD5

      3ac106f34da1956df92e61ca140d67f7

    • SHA1

      df95f07d0998c3905ea81fc69e12d4d846dccb04

    • SHA256

      83a3a61110c288b2340395b47d4565ad00eec2bec1a485a38e89ad79971ca84d

    • SHA512

      589eecaa45c1053aec9de3c4c8694fd6c6741ecd142db3a20105a8e914183248126bc6f53860b5cdee374c87eb2800e79409272acda0433dd79a430e0d4271d2

    • SSDEEP

      12288:jg7AIDQUi3+PyOn/ZheylBFkFOqfGS3WiWw1PnyR:jKBDQr3+r6dFOiDPyR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks