General
-
Target
1aa334cd885efd407bfe0f753ee530f0N.exe
-
Size
684KB
-
Sample
240726-rl3veawfqf
-
MD5
1aa334cd885efd407bfe0f753ee530f0
-
SHA1
b45559fbc5c37bc2a410da36a78618a32b938b9c
-
SHA256
35c1a3bcbb45c220e02a5be6a0ca7079fbd59e83d7565471ebdc5141ef1340d6
-
SHA512
4c480c39196f021b70209dae3cfdf150fe308de6d36faf176545bc40f60eceaa498f304ab9a23c7463f8d7d25e2ae0305c6a7f464aa296a0b641e60a41eb5bf5
-
SSDEEP
12288:OdgDcvRLr90kPcouDw07vHzi0SB9Ma9zvamDWarxedCHsv3eenlgWiaO:3gZrLwp/zA9Oil4kceenQa
Static task
static1
Behavioral task
behavioral1
Sample
1aa334cd885efd407bfe0f753ee530f0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1aa334cd885efd407bfe0f753ee530f0N.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
1aa334cd885efd407bfe0f753ee530f0N.exe
-
Size
684KB
-
MD5
1aa334cd885efd407bfe0f753ee530f0
-
SHA1
b45559fbc5c37bc2a410da36a78618a32b938b9c
-
SHA256
35c1a3bcbb45c220e02a5be6a0ca7079fbd59e83d7565471ebdc5141ef1340d6
-
SHA512
4c480c39196f021b70209dae3cfdf150fe308de6d36faf176545bc40f60eceaa498f304ab9a23c7463f8d7d25e2ae0305c6a7f464aa296a0b641e60a41eb5bf5
-
SSDEEP
12288:OdgDcvRLr90kPcouDw07vHzi0SB9Ma9zvamDWarxedCHsv3eenlgWiaO:3gZrLwp/zA9Oil4kceenQa
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-