Overview

overview

10

Static

static

9a12d01ae7...f2.exe

windows7_x64

10

9a12d01ae7...f2.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a12d01ae79f71cf7edc9eb54c3f58f2.exe

  • Size

    299KB

  • Sample

    210224-bjkv5z3hks

  • MD5

    9a12d01ae79f71cf7edc9eb54c3f58f2

  • SHA1

    19c587e757af582d81ede6524d444f338997d61f

  • SHA256

    4ef2301fc3da6b681932cd7a7d32fa6a86800651976a1b9a847864a65f6234f8

  • SHA512

    4e30f92fd1f555ddee8d2ef41ef782b8b61e900cc142e7c399f858b6c5ed3ff40c841a7daad201bbbd5e95ddedf0d864e110a4d0965c3def0b76138a1d798fe5

Score
10/10
redlinediscoveryinfostealerspyware

Malware Config

Targets

    • Target

      9a12d01ae79f71cf7edc9eb54c3f58f2.exe

    • Size

      299KB

    • MD5

      9a12d01ae79f71cf7edc9eb54c3f58f2

    • SHA1

      19c587e757af582d81ede6524d444f338997d61f

    • SHA256

      4ef2301fc3da6b681932cd7a7d32fa6a86800651976a1b9a847864a65f6234f8

    • SHA512

      4e30f92fd1f555ddee8d2ef41ef782b8b61e900cc142e7c399f858b6c5ed3ff40c841a7daad201bbbd5e95ddedf0d864e110a4d0965c3def0b76138a1d798fe5

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks