Overview

overview

10

Static

static

10

b0321e713a...98.exe

windows7_x64

10

b0321e713a...98.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0321e713ac45672639a5f946d8f7ac81d32de461de6eb18d34959acff996598

  • Size

    418KB

  • Sample

    210302-934knrgy26

  • MD5

    fae97d00358510873f30d2ab928bd665

  • SHA1

    b2d431d73aec5677189b761f719b308e7e23aaab

  • SHA256

    b0321e713ac45672639a5f946d8f7ac81d32de461de6eb18d34959acff996598

  • SHA512

    0512506ea0df83ea544d09dfce89eaf6199cac0369102fb87fe3f6c323a80ca403bfea055b6339244ea612a6b8fb3d88df3b4fd81e83a93b17d69d61d333b3ad

Score
10/10
redlinediscoveryinfostealerspyware

Malware Config

Targets

    • Target

      b0321e713ac45672639a5f946d8f7ac81d32de461de6eb18d34959acff996598

    • Size

      418KB

    • MD5

      fae97d00358510873f30d2ab928bd665

    • SHA1

      b2d431d73aec5677189b761f719b308e7e23aaab

    • SHA256

      b0321e713ac45672639a5f946d8f7ac81d32de461de6eb18d34959acff996598

    • SHA512

      0512506ea0df83ea544d09dfce89eaf6199cac0369102fb87fe3f6c323a80ca403bfea055b6339244ea612a6b8fb3d88df3b4fd81e83a93b17d69d61d333b3ad

    Score
    10/10
    redlinediscoveryinfostealerspyware

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks