Overview

overview

10

Static

static

8

ce31f1e5ea...ba.exe

windows7_x64

10

ce31f1e5ea...ba.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce31f1e5ea5951c790151fec2606daba.exe

  • Size

    322KB

  • Sample

    210115-vhx26xmt46

  • MD5

    ce31f1e5ea5951c790151fec2606daba

  • SHA1

    f6ff74832c892f668ae887e23ecc4b18abfc514a

  • SHA256

    898c957d6bc0417994827db79ca2c264ee100f0ccf54cafdbf18b4e9c9559c0b

  • SHA512

    0b7c8659bfd00130b90d94a0fa22795244f791ed92c6e54298526638e0e8d6c9e237238e301de31bfb936589deb62a70e19dcfc59c7f21e857086c64e1e8d287

Score
10/10
redlinediscoveryinfostealerspywareupx

Malware Config

Targets

    • Target

      ce31f1e5ea5951c790151fec2606daba.exe

    • Size

      322KB

    • MD5

      ce31f1e5ea5951c790151fec2606daba

    • SHA1

      f6ff74832c892f668ae887e23ecc4b18abfc514a

    • SHA256

      898c957d6bc0417994827db79ca2c264ee100f0ccf54cafdbf18b4e9c9559c0b

    • SHA512

      0b7c8659bfd00130b90d94a0fa22795244f791ed92c6e54298526638e0e8d6c9e237238e301de31bfb936589deb62a70e19dcfc59c7f21e857086c64e1e8d287

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks