General
- Target 19d88091245e63bd2ee7072470f86f36.exe
- Size 1.7MB
- Sample210611-c1pbc5mel2
- SHA256 dc1a540149dffb968cc641f1770ffb45aaa29f23cd5e19483c474a71cc1737da
- MD5 19d88091245e63bd2ee7072470f86f36
- SHA1 ba5caef336c850805e6cbf4a4460e02543af64a0
- SHA512 3f813fd3806f4c578a8bb425f30558d844ed55b739673f610428df0a933de0571030fda6977a6b2b084a5c9c4f80362f959e72c308738e6a3981e6113998473b
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
19d88091245e63bd2ee7072470f86f36.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
19d88091245e63bd2ee7072470f86f36.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
WHITENEW
C2
-
cengonic.xyz:80
Targets
-
- Target 19d88091245e63bd2ee7072470f86f36.exe
- Size 1.7MB
- SHA256 dc1a540149dffb968cc641f1770ffb45aaa29f23cd5e19483c474a71cc1737da
- MD5 19d88091245e63bd2ee7072470f86f36
- SHA1 ba5caef336c850805e6cbf4a4460e02543af64a0
- SHA512 3f813fd3806f4c578a8bb425f30558d844ed55b739673f610428df0a933de0571030fda6977a6b2b084a5c9c4f80362f959e72c308738e6a3981e6113998473b
- MD5 SHA1 SHA512
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine Payload
Suspicious use of SetThreadContext