Overview

overview

10

Static

static

f781bbd506...ba.exe

windows7_x64

10

f781bbd506...ba.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f781bbd506e29a57c76c1e647bef90ba.exe

  • Size

    275KB

  • Sample

    210121-7vde817rye

  • MD5

    f781bbd506e29a57c76c1e647bef90ba

  • SHA1

    f4f83251f61441fb61cd814aa0af262e82c4381a

  • SHA256

    2d6aa491de3e29ea299cd6b687eb6cec6f59f080573213829aa3016b7a546266

  • SHA512

    ab1d57ad46f7a20dc6a3dda9da2d35dfc002b7e52dc75401cb389c7626707994ef04d334ce1641b4df30728170f2bf0332d59b4b35de237d9fdaf3e132b3ad25

Score
10/10
redlinediscoveryinfostealerspyware

Malware Config

Targets

    • Target

      f781bbd506e29a57c76c1e647bef90ba.exe

    • Size

      275KB

    • MD5

      f781bbd506e29a57c76c1e647bef90ba

    • SHA1

      f4f83251f61441fb61cd814aa0af262e82c4381a

    • SHA256

      2d6aa491de3e29ea299cd6b687eb6cec6f59f080573213829aa3016b7a546266

    • SHA512

      ab1d57ad46f7a20dc6a3dda9da2d35dfc002b7e52dc75401cb389c7626707994ef04d334ce1641b4df30728170f2bf0332d59b4b35de237d9fdaf3e132b3ad25

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks