Overview

overview

10

Static

static

bd0bcda992...93.exe

windows7_x64

10

bd0bcda992...93.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd0bcda992939e8c117e758e8ebffc93.exe

  • Size

    283KB

  • Sample

    201202-mj24dz2jna

  • MD5

    bd0bcda992939e8c117e758e8ebffc93

  • SHA1

    60f5ccb2f8f7859c0a580041d651fe2e6cd1edbe

  • SHA256

    a3948163bc436fde2808c4c76fccc90d515f3d754fc5851f0eb1e8b40a539e2b

  • SHA512

    1c81bfed10ee288fbb6f8a877ce3f7d64407cfd547e1be02d5789d0a528800ff8fa2fc3f280171a377daa5f013286bb7fb1e13b2cd4261caf2892462cf057f36

Score
10/10
redlinediscoveryinfostealerspyware

Malware Config

Targets

    • Target

      bd0bcda992939e8c117e758e8ebffc93.exe

    • Size

      283KB

    • MD5

      bd0bcda992939e8c117e758e8ebffc93

    • SHA1

      60f5ccb2f8f7859c0a580041d651fe2e6cd1edbe

    • SHA256

      a3948163bc436fde2808c4c76fccc90d515f3d754fc5851f0eb1e8b40a539e2b

    • SHA512

      1c81bfed10ee288fbb6f8a877ce3f7d64407cfd547e1be02d5789d0a528800ff8fa2fc3f280171a377daa5f013286bb7fb1e13b2cd4261caf2892462cf057f36

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks