General

  • Target

    d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2.exe

  • Size

    918KB

  • Sample

    241121-b3cfsayclr

  • MD5

    624da2ae29d5f84f6c2cf9dbff2f584c

  • SHA1

    b7e57ba78a74c49395ce11da6674653cfe7a81fd

  • SHA256

    d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2

  • SHA512

    71074cc038a1b9f40f3775874ea1fe2c41d5b7d181f0c086e780c45485060d42bc09d90119e5d08ade84e6351fcf08113f9f61a0d72f5d54628184c60bb12902

  • SSDEEP

    24576:KrRKzyKje6aY8FGjyDUYZluEhckcUkdH+:ORKWKje6wQjcU+lrkt+

Malware Config

Targets

    • Target

      d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2.exe

    • Size

      918KB

    • MD5

      624da2ae29d5f84f6c2cf9dbff2f584c

    • SHA1

      b7e57ba78a74c49395ce11da6674653cfe7a81fd

    • SHA256

      d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2

    • SHA512

      71074cc038a1b9f40f3775874ea1fe2c41d5b7d181f0c086e780c45485060d42bc09d90119e5d08ade84e6351fcf08113f9f61a0d72f5d54628184c60bb12902

    • SSDEEP

      24576:KrRKzyKje6aY8FGjyDUYZluEhckcUkdH+:ORKWKje6wQjcU+lrkt+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks