redline | 254f8a160343897dc3e748af2f4c2164455afe3daaa75654c0a7e13483a43f0c | Triage

Sharing

General

Target

de53d7c7d225c7274442a8c6cf93bbc7.exe
Size

286KB
Sample

210317-c2fhm8edtx
MD5

de53d7c7d225c7274442a8c6cf93bbc7
SHA1

33cd0c7fa803920e2fe35f4b03e7d07d4e2b78bf
SHA256

254f8a160343897dc3e748af2f4c2164455afe3daaa75654c0a7e13483a43f0c
SHA512

daf1ef7d8a16a15ab09c574789e28b94f56ce4b90dd721aac4ef14f661079356f08f55a478f213ca2aabeeadc81e3d53fd890a78f6ded5e8fac38c91efb3a7d0

Score

10^/10

redline discovery infostealer spyware stealer

Malware Config

Targets

- Target
  
  de53d7c7d225c7274442a8c6cf93bbc7.exe
- Size
  
  286KB
- MD5
  
  de53d7c7d225c7274442a8c6cf93bbc7
- SHA1
  
  33cd0c7fa803920e2fe35f4b03e7d07d4e2b78bf
- SHA256
  
  254f8a160343897dc3e748af2f4c2164455afe3daaa75654c0a7e13483a43f0c
- SHA512
  
  daf1ef7d8a16a15ab09c574789e28b94f56ce4b90dd721aac4ef14f661079356f08f55a478f213ca2aabeeadc81e3d53fd890a78f6ded5e8fac38c91efb3a7d0
Score

10^/10

redline discovery infostealer spyware stealer
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

redlinediscoveryinfostealerspywarestealer

behavioral2

redlinediscoveryinfostealerspywarestealer