Overview

overview

10

Static

static

8

b69cff820f...96.exe

windows7_x64

10

b69cff820f...96.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b69cff820fb0269e35289451cc64bc96.exe

  • Size

    319KB

  • Sample

    210115-27tdw6q9nx

  • MD5

    b69cff820fb0269e35289451cc64bc96

  • SHA1

    c229edcf0463997ea71fac52001de266e0188269

  • SHA256

    1f97ed53cdcf5edc9f0a16379ed5dfc57d49235d7d1539bb97543ebd5a83e5b9

  • SHA512

    f2c3d2105c568476b8a5fec871adfc0924e9375d3b79c7b95c3900c59ad09ec8fd59b23d83be7b6b124f01805cc5e46fa28d08584336cbc7f257ecc6f6e221ae

Score
10/10
redlinediscoveryinfostealerspywareupx

Malware Config

Targets

    • Target

      b69cff820fb0269e35289451cc64bc96.exe

    • Size

      319KB

    • MD5

      b69cff820fb0269e35289451cc64bc96

    • SHA1

      c229edcf0463997ea71fac52001de266e0188269

    • SHA256

      1f97ed53cdcf5edc9f0a16379ed5dfc57d49235d7d1539bb97543ebd5a83e5b9

    • SHA512

      f2c3d2105c568476b8a5fec871adfc0924e9375d3b79c7b95c3900c59ad09ec8fd59b23d83be7b6b124f01805cc5e46fa28d08584336cbc7f257ecc6f6e221ae

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks