General
-
Target
d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2.exe
-
Size
918KB
-
Sample
241121-b3cfsayclr
-
MD5
624da2ae29d5f84f6c2cf9dbff2f584c
-
SHA1
b7e57ba78a74c49395ce11da6674653cfe7a81fd
-
SHA256
d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2
-
SHA512
71074cc038a1b9f40f3775874ea1fe2c41d5b7d181f0c086e780c45485060d42bc09d90119e5d08ade84e6351fcf08113f9f61a0d72f5d54628184c60bb12902
-
SSDEEP
24576:KrRKzyKje6aY8FGjyDUYZluEhckcUkdH+:ORKWKje6wQjcU+lrkt+
Static task
static1
Behavioral task
behavioral1
Sample
d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2.exe
-
Size
918KB
-
MD5
624da2ae29d5f84f6c2cf9dbff2f584c
-
SHA1
b7e57ba78a74c49395ce11da6674653cfe7a81fd
-
SHA256
d3457eb8af3462ebafb7870e216ee3fa448162a0f7be6a682bb9118129386ba2
-
SHA512
71074cc038a1b9f40f3775874ea1fe2c41d5b7d181f0c086e780c45485060d42bc09d90119e5d08ade84e6351fcf08113f9f61a0d72f5d54628184c60bb12902
-
SSDEEP
24576:KrRKzyKje6aY8FGjyDUYZluEhckcUkdH+:ORKWKje6wQjcU+lrkt+
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-