Overview

overview

10

Static

static

0f518cf6ac...39.exe

windows7_x64

10

0f518cf6ac...39.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f518cf6ac968f3dd04a4e7b35e3d347f5f005e210ffec3d036ca975aa27f539

  • Size

    132KB

  • Sample

    210301-3yc66a8zra

  • MD5

    cec219e16f65da919c8d3a53ceabac78

  • SHA1

    82491b05219eedfdab9866a165938a013104391c

  • SHA256

    0f518cf6ac968f3dd04a4e7b35e3d347f5f005e210ffec3d036ca975aa27f539

  • SHA512

    5e59b75fe5e9d48e1bc975310201ea9dcc3a1ceb7ec61b107f3003b335b80cdf85230802b70cb1db4e0ad55ab2c54f45e9b7c07028958ab44a1f98db7517fd8c

Score
10/10
redlinediscoveryinfostealerspyware

Malware Config

Targets

    • Target

      0f518cf6ac968f3dd04a4e7b35e3d347f5f005e210ffec3d036ca975aa27f539

    • Size

      132KB

    • MD5

      cec219e16f65da919c8d3a53ceabac78

    • SHA1

      82491b05219eedfdab9866a165938a013104391c

    • SHA256

      0f518cf6ac968f3dd04a4e7b35e3d347f5f005e210ffec3d036ca975aa27f539

    • SHA512

      5e59b75fe5e9d48e1bc975310201ea9dcc3a1ceb7ec61b107f3003b335b80cdf85230802b70cb1db4e0ad55ab2c54f45e9b7c07028958ab44a1f98db7517fd8c

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks