Overview

overview

10

Static

static

8

1cee7f3e56...f2.exe

windows7_x64

10

1cee7f3e56...f2.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cee7f3e56ca6f40161af3f84c4972f2.exe

  • Size

    329KB

  • Sample

    210121-aky6zsgb2e

  • MD5

    1cee7f3e56ca6f40161af3f84c4972f2

  • SHA1

    9385a652b3f7f60c7c0028d8c4d176267b8a8edb

  • SHA256

    57b01e75fdb6b0da38dd794744850e787ac069febb340eef4b3a5cf4760e6726

  • SHA512

    a6761fb7fc3e9e48e8516307c9421536f0a51fb9bdcca59a0cc49daafbc8cdf550769c4dd559f8fedfb29a757545997937a384b72f2f735ecc38adcedc9b5127

Score
10/10
redlinediscoveryinfostealerspywareupx

Malware Config

Targets

    • Target

      1cee7f3e56ca6f40161af3f84c4972f2.exe

    • Size

      329KB

    • MD5

      1cee7f3e56ca6f40161af3f84c4972f2

    • SHA1

      9385a652b3f7f60c7c0028d8c4d176267b8a8edb

    • SHA256

      57b01e75fdb6b0da38dd794744850e787ac069febb340eef4b3a5cf4760e6726

    • SHA512

      a6761fb7fc3e9e48e8516307c9421536f0a51fb9bdcca59a0cc49daafbc8cdf550769c4dd559f8fedfb29a757545997937a384b72f2f735ecc38adcedc9b5127

    Score
    10/10
    redlinediscoveryinfostealerspywareupx

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks