Overview

overview

10

Static

static

10

Redline.zip

windows10-ltsc 2021-x64

10

Resubmissions

07-02-2025 18:21

250207-wzas1a1rbs 10

07-02-2025 18:14

250207-wvew6asrbr 10

14-02-2024 18:20

240214-wyrecshf8w 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Redline.zip

  • Size

    15.0MB

  • Sample

    250207-wzas1a1rbs

  • MD5

    0f686985e788860aa57fd6c0394b31ac

  • SHA1

    16a28142b90396bdec88b542856afc6a1d61de63

  • SHA256

    c9ae7d325d8f08613bb8dff54d14591f4fbdd4f289509092b4fbb16c6b855d71

  • SHA512

    42547b6a691c89ed58b8aa0bbd4e11b1c4411bd5291c10a8f575d5c2b8418fb2ed59f14a9838db3864468d751b396abbae0bf0389e407dc7c6e0013c47dfa036

  • SSDEEP

    393216:Qo/GNMywpahzUACC3ubztEDnaYSH0DrmLMlvWqYiABvXpyVIqtR5R:Qo/GUCUAJ3uVmaiDr1Wln1ZyV/R5R

Score
10/10
redlinesectopratdiscoveryinfostealer

Malware Config

Targets

    • Target

      Redline.zip

    • Size

      15.0MB

    • MD5

      0f686985e788860aa57fd6c0394b31ac

    • SHA1

      16a28142b90396bdec88b542856afc6a1d61de63

    • SHA256

      c9ae7d325d8f08613bb8dff54d14591f4fbdd4f289509092b4fbb16c6b855d71

    • SHA512

      42547b6a691c89ed58b8aa0bbd4e11b1c4411bd5291c10a8f575d5c2b8418fb2ed59f14a9838db3864468d751b396abbae0bf0389e407dc7c6e0013c47dfa036

    • SSDEEP

      393216:Qo/GNMywpahzUACC3ubztEDnaYSH0DrmLMlvWqYiABvXpyVIqtR5R:Qo/GUCUAJ3uVmaiDr1Wln1ZyV/R5R

    Score
    10/10
    redlinediscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks