General

  • Target

    a929e8b07c34e5e816d1386a99003a13857ea4f06cdf83ebb23d1bdf96ea883d

  • Size

    726KB

  • Sample

    240726-sxz4bswemr

  • MD5

    9c16f22d96d3ab540b7ddf497842a392

  • SHA1

    97374ee3a62a3cfcef767d195b5d61b0bb3d2761

  • SHA256

    a929e8b07c34e5e816d1386a99003a13857ea4f06cdf83ebb23d1bdf96ea883d

  • SHA512

    578cef0a23e39f67dfa5b7474ac46acd997b19cbe1b7eb0869231154a29d32ad777e532ba1e8fe8bda140284b7c7f327c030b76e5d0a921c05266369a839baf0

  • SSDEEP

    12288:SIAjRd+QnyMw6cw264zMgMPUhWQ3MAlm3KeBTCfBZvyp6fecilqIIE7rT:SzjSLcbPtP893MAQ3KWMyp6f+wDQrT

Malware Config

Targets

    • Target

      a929e8b07c34e5e816d1386a99003a13857ea4f06cdf83ebb23d1bdf96ea883d

    • Size

      726KB

    • MD5

      9c16f22d96d3ab540b7ddf497842a392

    • SHA1

      97374ee3a62a3cfcef767d195b5d61b0bb3d2761

    • SHA256

      a929e8b07c34e5e816d1386a99003a13857ea4f06cdf83ebb23d1bdf96ea883d

    • SHA512

      578cef0a23e39f67dfa5b7474ac46acd997b19cbe1b7eb0869231154a29d32ad777e532ba1e8fe8bda140284b7c7f327c030b76e5d0a921c05266369a839baf0

    • SSDEEP

      12288:SIAjRd+QnyMw6cw264zMgMPUhWQ3MAlm3KeBTCfBZvyp6fecilqIIE7rT:SzjSLcbPtP893MAQ3KWMyp6f+wDQrT

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks