General

  • Target

    7b1f3b2a2ff3e41d10b479d9bb95a811.exe

  • Size

    131KB

  • Sample

    201222-tkz6m4gfwe

  • MD5

    7b1f3b2a2ff3e41d10b479d9bb95a811

  • SHA1

    79810af2372ba021e01a1dd3fe3ea7522716a7a1

  • SHA256

    d911572c2fce9e45ecf07feb9b4d407a06f0993fad6d2d9f533d06a99ba79b66

  • SHA512

    1aa5e598e78722693928ffd1ff450877d1b3ee8d3714081472e685d97d3f2ea7ffba4b2efc9063eb285e2d1bab7ea5186589c1ee16d9621761ac74a5bf919ad0

Malware Config

Targets

    • Target

      7b1f3b2a2ff3e41d10b479d9bb95a811.exe

    • Size

      131KB

    • MD5

      7b1f3b2a2ff3e41d10b479d9bb95a811

    • SHA1

      79810af2372ba021e01a1dd3fe3ea7522716a7a1

    • SHA256

      d911572c2fce9e45ecf07feb9b4d407a06f0993fad6d2d9f533d06a99ba79b66

    • SHA512

      1aa5e598e78722693928ffd1ff450877d1b3ee8d3714081472e685d97d3f2ea7ffba4b2efc9063eb285e2d1bab7ea5186589c1ee16d9621761ac74a5bf919ad0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks