Overview

overview

10

Static

static

1

CryptoMine...er.exe

windows7-x64

10

CryptoMine...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CryptoMinerBuilder.exe

  • Size

    572KB

  • Sample

    241229-xy148swjew

  • MD5

    c6e1b4c935a6fc29c0761b51b9d0b436

  • SHA1

    16845245dcc7eff90a4e45ed2586d18e6ca181be

  • SHA256

    f7aa7848b465cabf2afd062d7831fe0fe499c765a06a5544128f3816e3097104

  • SHA512

    8f663865b5bd0254c9764d9523542da074d3dd012f453bb46a73bde908ca162f9c1fdc304960921fbc57d39afcc946eae6a8e7f21d3c2f8c58080a6621e20567

  • SSDEEP

    12288:18DYqxPebX3qEhMwiQ1Mr5f6G5UDYvqrC8ZJeJyP2n:14pPebX3qaOQ1M9yG5ULrDZP2n

Score
10/10
redlinediscoveryinfostealer

Malware Config

Targets

    • Target

      CryptoMinerBuilder.exe

    • Size

      572KB

    • MD5

      c6e1b4c935a6fc29c0761b51b9d0b436

    • SHA1

      16845245dcc7eff90a4e45ed2586d18e6ca181be

    • SHA256

      f7aa7848b465cabf2afd062d7831fe0fe499c765a06a5544128f3816e3097104

    • SHA512

      8f663865b5bd0254c9764d9523542da074d3dd012f453bb46a73bde908ca162f9c1fdc304960921fbc57d39afcc946eae6a8e7f21d3c2f8c58080a6621e20567

    • SSDEEP

      12288:18DYqxPebX3qEhMwiQ1Mr5f6G5UDYvqrC8ZJeJyP2n:14pPebX3qaOQ1M9yG5ULrDZP2n

    Score
    10/10
    redlinediscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks