General

  • Target

    e67709406599e20361572245e391a5f1.exe

  • Size

    352KB

  • Sample

    210116-81frsbem9e

  • MD5

    e67709406599e20361572245e391a5f1

  • SHA1

    eee2b691a0223c1276e3393351475397e0025350

  • SHA256

    7d2193feb3fb2e72cea88023a60aae9defeae560358eddcba59d97bd8234bec9

  • SHA512

    971672e108972f279dbba22c2ff060f2550d88caf1d99d63a545387d9576faad236ccba7a54bcadbc9835d407e44e970cb46ba7e5f8dd3c9fdd6234c00ee5d35

Malware Config

Targets

    • Target

      e67709406599e20361572245e391a5f1.exe

    • Size

      352KB

    • MD5

      e67709406599e20361572245e391a5f1

    • SHA1

      eee2b691a0223c1276e3393351475397e0025350

    • SHA256

      7d2193feb3fb2e72cea88023a60aae9defeae560358eddcba59d97bd8234bec9

    • SHA512

      971672e108972f279dbba22c2ff060f2550d88caf1d99d63a545387d9576faad236ccba7a54bcadbc9835d407e44e970cb46ba7e5f8dd3c9fdd6234c00ee5d35

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks