General

  • Target

    4B093820F7D9E00A9BE50E150B6EAFFA.exe

  • Size

    660KB

  • Sample

    210322-8gaq9qn7jj

  • MD5

    4b093820f7d9e00a9be50e150b6eaffa

  • SHA1

    ffc34783056b569434ace8266bb984c8c56f128c

  • SHA256

    2da9ec6c0d144f57685912eebc2ecc2fd5d3a3faa5de0ae8a6a48036d0b9a03d

  • SHA512

    86c8f2b2e76d32396a524243d150a972b11f7730e8dba49fbfe4ee7a7c01299e5091adaae4e3a1c77ffaab12cf2902d20b943160be41e072d1b43a7c326f5591

Malware Config

Targets

    • Target

      4B093820F7D9E00A9BE50E150B6EAFFA.exe

    • Size

      660KB

    • MD5

      4b093820f7d9e00a9be50e150b6eaffa

    • SHA1

      ffc34783056b569434ace8266bb984c8c56f128c

    • SHA256

      2da9ec6c0d144f57685912eebc2ecc2fd5d3a3faa5de0ae8a6a48036d0b9a03d

    • SHA512

      86c8f2b2e76d32396a524243d150a972b11f7730e8dba49fbfe4ee7a7c01299e5091adaae4e3a1c77ffaab12cf2902d20b943160be41e072d1b43a7c326f5591

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks