Overview

overview

10

Static

static

1c5de33a75...ca.exe

windows7_x64

10

1c5de33a75...ca.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c5de33a75e4c9bebf045767ff494bbc8c12eae88989ab91466815f86ee312ca

  • Size

    282KB

  • Sample

    210301-3q3qpg9aka

  • MD5

    7fb6b663f2cfc4e48ddc52b2e7b9c7fd

  • SHA1

    08bdf07080771dd8755b3474cd814fc24cfbbd4a

  • SHA256

    1c5de33a75e4c9bebf045767ff494bbc8c12eae88989ab91466815f86ee312ca

  • SHA512

    ed9ede1d6194eeb10ff595a6b462c1d67137242833ab6ae0f7cf552402d4919b767d192a0cfb5c7ca86e8eaee5a0cd81fcc005256c342e951e30007177b85990

Score
10/10
redlinediscoveryinfostealerspyware

Malware Config

Targets

    • Target

      1c5de33a75e4c9bebf045767ff494bbc8c12eae88989ab91466815f86ee312ca

    • Size

      282KB

    • MD5

      7fb6b663f2cfc4e48ddc52b2e7b9c7fd

    • SHA1

      08bdf07080771dd8755b3474cd814fc24cfbbd4a

    • SHA256

      1c5de33a75e4c9bebf045767ff494bbc8c12eae88989ab91466815f86ee312ca

    • SHA512

      ed9ede1d6194eeb10ff595a6b462c1d67137242833ab6ae0f7cf552402d4919b767d192a0cfb5c7ca86e8eaee5a0cd81fcc005256c342e951e30007177b85990

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks