Overview

overview

10

Static

static

SecuriteIn...44.exe

windows7_x64

10

SecuriteIn...44.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.GenericKD.36452518.2355.1244

  • Size

    160KB

  • Sample

    210310-kq8jlhrfya

  • MD5

    4ed06835dd64287ea65dbd0f16d164f7

  • SHA1

    a9553e8e70e67f94c07d618c117f0f661d65dbec

  • SHA256

    1f296bceec7fc11b709d744bc6230b5997cfd5e210360d6f91542e2251c866a1

  • SHA512

    20d4436a56ad84ba7478ee82083cba28570f8db8fdeae48171ec5f846569f1e2af5cfed14fe40111368ee5e9ea462a2094b3d68b23bc2cf3beddb2999b505f0b

Score
10/10
redlineinfostealer

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.GenericKD.36452518.2355.1244

    • Size

      160KB

    • MD5

      4ed06835dd64287ea65dbd0f16d164f7

    • SHA1

      a9553e8e70e67f94c07d618c117f0f661d65dbec

    • SHA256

      1f296bceec7fc11b709d744bc6230b5997cfd5e210360d6f91542e2251c866a1

    • SHA512

      20d4436a56ad84ba7478ee82083cba28570f8db8fdeae48171ec5f846569f1e2af5cfed14fe40111368ee5e9ea462a2094b3d68b23bc2cf3beddb2999b505f0b

    Score
    10/10
    redlineinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks