Overview

overview

10

Static

static

8

383b866c7b...d3.exe

windows7_x64

10

383b866c7b...d3.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    383b866c7b2a1039fbf537381399fed3.exe

  • Size

    349KB

  • Sample

    210108-xspvchd4ae

  • MD5

    383b866c7b2a1039fbf537381399fed3

  • SHA1

    67233ab2394ad1e75362cbc3278081ea5105d821

  • SHA256

    0a5faef2bdcce3d5b58e9062bf8f936596a96eaf0b270ed86cac3033cd922537

  • SHA512

    3c4530ea744f10687ea59a0e6ccf5a3e4101b2e9b2086f08068be8c71c789e94b54c52fbcbc1754f8edb44c7b7d246bc110d8fa5a793c71e335cfd19e6cb6d5b

Score
10/10
redlinediscoveryinfostealerspywareupx

Malware Config

Targets

    • Target

      383b866c7b2a1039fbf537381399fed3.exe

    • Size

      349KB

    • MD5

      383b866c7b2a1039fbf537381399fed3

    • SHA1

      67233ab2394ad1e75362cbc3278081ea5105d821

    • SHA256

      0a5faef2bdcce3d5b58e9062bf8f936596a96eaf0b270ed86cac3033cd922537

    • SHA512

      3c4530ea744f10687ea59a0e6ccf5a3e4101b2e9b2086f08068be8c71c789e94b54c52fbcbc1754f8edb44c7b7d246bc110d8fa5a793c71e335cfd19e6cb6d5b

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks