Overview

overview

10

Static

static

SecuriteIn...87.exe

windows7_x64

10

SecuriteIn...87.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.PackedNET.540.9726.18287

  • Size

    1.0MB

  • Sample

    210211-acq9366xxa

  • MD5

    26ed749390d4a00fff4181a61c306198

  • SHA1

    84e762f9d06f95260ed399bb0442e02b98102ff5

  • SHA256

    caee9387d7ef6216014c68f4acb557c2eaee0b6e9dd79141288eb1d9d06bf30c

  • SHA512

    6ab29388801f5c9a3c7d4292d6b3cdfffa7b02d5eec524e33859e2b5caedcbd47016b463a00300379b7d41ac1db48d961f772ce0f2c5d783a0d338e9a32d65b5

Score
10/10
redlinediscoveryinfostealerspyware

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.PackedNET.540.9726.18287

    • Size

      1.0MB

    • MD5

      26ed749390d4a00fff4181a61c306198

    • SHA1

      84e762f9d06f95260ed399bb0442e02b98102ff5

    • SHA256

      caee9387d7ef6216014c68f4acb557c2eaee0b6e9dd79141288eb1d9d06bf30c

    • SHA512

      6ab29388801f5c9a3c7d4292d6b3cdfffa7b02d5eec524e33859e2b5caedcbd47016b463a00300379b7d41ac1db48d961f772ce0f2c5d783a0d338e9a32d65b5

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks