General
-
Target
Zoom.exe
-
Size
1.0MB
-
Sample
250406-h83y9attbz
-
MD5
3ded2b22f85e0720a350969315ce9575
-
SHA1
7177823472026652dd739aae3c73aec6e2f0b220
-
SHA256
0e9ebbf4391a1ce11ceecab0c0699a229a7f2a20b9909600310db15b1b3cf772
-
SHA512
1c5e21ff06477efc90fb7a78d0300faad58677b836fc4838486faaa8780a99f38eaa445d521c20980935094cbedceedb4c89454badb88bbcdaed13f427bc5ff3
-
SSDEEP
24576:Fem/E/ob86A6X5EdNWbHh3v2V6X5EdNWbHh3v2st:MmsgIn+5ETwJ++5ETwJ/
Static task
static1
Behavioral task
behavioral1
Sample
Zoom.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
redline
zoom
us02web-zoom.icu:1912
Targets
-
-
Target
Zoom.exe
-
Size
1.0MB
-
MD5
3ded2b22f85e0720a350969315ce9575
-
SHA1
7177823472026652dd739aae3c73aec6e2f0b220
-
SHA256
0e9ebbf4391a1ce11ceecab0c0699a229a7f2a20b9909600310db15b1b3cf772
-
SHA512
1c5e21ff06477efc90fb7a78d0300faad58677b836fc4838486faaa8780a99f38eaa445d521c20980935094cbedceedb4c89454badb88bbcdaed13f427bc5ff3
-
SSDEEP
24576:Fem/E/ob86A6X5EdNWbHh3v2V6X5EdNWbHh3v2st:MmsgIn+5ETwJ++5ETwJ/
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-