Overview

overview

10

Static

static

881E6E6A90...B2.exe

windows7_x64

10

881E6E6A90...B2.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    881E6E6A9037E3A43028ABE53FACDCB2.exe

  • Size

    1.1MB

  • Sample

    210323-rhhftr4g6s

  • MD5

    881e6e6a9037e3a43028abe53facdcb2

  • SHA1

    515cf51a385057c45129ae2c00b2e80b252c9fb3

  • SHA256

    4590fdf566b5fdb3c8d9a9b7b3eba1528f7d154701602845d6cd29ee13fdfdb8

  • SHA512

    1024bd6977f88c58a951ae0162151625df4b0403576a1168de52d353f12e1881abaef7bc1ffe9ab7575075adfaa3631eece07ebdfa3ae0467ae422561b7e0355

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      881E6E6A9037E3A43028ABE53FACDCB2.exe

    • Size

      1.1MB

    • MD5

      881e6e6a9037e3a43028abe53facdcb2

    • SHA1

      515cf51a385057c45129ae2c00b2e80b252c9fb3

    • SHA256

      4590fdf566b5fdb3c8d9a9b7b3eba1528f7d154701602845d6cd29ee13fdfdb8

    • SHA512

      1024bd6977f88c58a951ae0162151625df4b0403576a1168de52d353f12e1881abaef7bc1ffe9ab7575075adfaa3631eece07ebdfa3ae0467ae422561b7e0355

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks