Overview

overview

10

Static

static

10

5Yl6Zy4B4H...1f.exe

windows7_x64

10

5Yl6Zy4B4H...1f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5Yl6Zy4B4HJ2tu1rCe1f.exe

  • Size

    128KB

  • Sample

    210505-gtc58z7x8x

  • MD5

    53e8ba681a1e03728a17f0aee3ed7fb8

  • SHA1

    afcab29aabe431b85a3efd0b2cbbacfcb7a06282

  • SHA256

    46330652084b93bffdc354a503f3c65b7ed8589c379822c16674bace498c2950

  • SHA512

    ba047a7bb4f291d7c97d835a78a541dc0d92b7e25e08c9be8ef118ee813a582badfeadaa66fac9a91e56a244cf2cf8505252ab03a91e649b4e24fe0c5b35d0b9

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Extracted

Family

redline

C2

87.251.71.62:80

Targets

    • Target

      5Yl6Zy4B4HJ2tu1rCe1f.exe

    • Size

      128KB

    • MD5

      53e8ba681a1e03728a17f0aee3ed7fb8

    • SHA1

      afcab29aabe431b85a3efd0b2cbbacfcb7a06282

    • SHA256

      46330652084b93bffdc354a503f3c65b7ed8589c379822c16674bace498c2950

    • SHA512

      ba047a7bb4f291d7c97d835a78a541dc0d92b7e25e08c9be8ef118ee813a582badfeadaa66fac9a91e56a244cf2cf8505252ab03a91e649b4e24fe0c5b35d0b9

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks