Overview

overview

10

Static

static

3

@Mr_Joody_alice.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    @Mr_Joody_alice.zip

  • Size

    198KB

  • Sample

    241119-hycpba1pcw

  • MD5

    f2e8f1bcc9c9003c28d0053d4e749456

  • SHA1

    05c6f4ddf5b470c39d8851e4e617f6646415cb4c

  • SHA256

    11eb70597f116d6dbc71e7fb64cc56265d44615830f58205f7d153acb97e5d37

  • SHA512

    8aa1b98d7585e5de46484ccf63ae6781cd6d028aa1ccdcaaef1bfa1f7bfd4b863fe6ccb20f13b01dcdbab98cd1202059ca91b412d9be97c14de1a8573099ca18

  • SSDEEP

    3072:8LxLo/Hn38qJJQXsAdaRzP1P7hOVf82n34No4enBx0AzOY/I8i5l:QxLqHn9Jf1Bhqfjncnd8Ml

Score
10/10
redlinediscoveryinfostealer

Malware Config

Targets

    • Target

      @Mr_Joody_alice.exe

    • Size

      10.0MB

    • MD5

      b8d7cc60bffc9bc7e582e6464bd3d1b6

    • SHA1

      07df4441e44ee8f5b4610578fd5de41dc638a7d9

    • SHA256

      a76fb3986fc075d20eed9e5115354d389cf3ca511589933accc296832e6175f3

    • SHA512

      34808fc1184ae8d9d44378eac5dae16c9ca87c5ebc4afc7b7264f0fca4f04d47969b9aead8379619d80d5779b554f1703e3c00c9b0b8f2af58304bf3649b2e12

    • SSDEEP

      6144:zbwaYaYO7t1PCpvBEMAOP2lPVAHorqq5KUTiGwKWkW3RMS117Dy6o:gaYaPOAM1QVAHvq5E1w6

    Score
    10/10
    redlinediscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks