Overview

overview

10

Static

static

10

693b398f13...07.exe

windows7_x64

7

693b398f13...07.exe

windows10_x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    693b398f13f1ffd324805ed4e1e66607
  • Size 116KB
  • Sample210916-x4ylaseca8
  • SHA256 2facc80b9d0a9c396faf53d48e5a0793b2aa5697fba31e1a4148996e6b49343f
  • MD5 SHA1 SHA512
Score
10/10
redlinespermadiscoveryspywarestealer

Malware Config

Extracted

Family

  • redline

Botnet

  • sperma

C2

  • 185.180.231.69:2796

Targets

    • Target
      693b398f13f1ffd324805ed4e1e66607
    • Size 116KB
    • SHA256 2facc80b9d0a9c396faf53d48e5a0793b2aa5697fba31e1a4148996e6b49343f
    • MD5 SHA1 SHA512
    Score
    7/10
    discoveryspywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks