Overview

overview

10

Static

static

6c9c308ce5...72.exe

windows7_x64

10

6c9c308ce5...72.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c9c308ce5c725fa5bf276517e4b246a46ad6a1e61a72.exe

  • Size

    927KB

  • Sample

    211024-g67nzsdcg9

  • MD5

    950c6b87e1bb3df00a70c46575e55c24

  • SHA1

    794737f9d40f2239eff492525b603efed0de0177

  • SHA256

    6c9c308ce5c725fa5bf276517e4b246a46ad6a1e61a7296f0f250d20d00cbc69

  • SHA512

    aba4addbc9b0211afd1f8fd439546a288e8f017419b8998033603a83731a5a56b1ffea726733d614ae59aa03f26ca8380de2c503a39563d2afe47aa0fe999e75

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      6c9c308ce5c725fa5bf276517e4b246a46ad6a1e61a72.exe

    • Size

      927KB

    • MD5

      950c6b87e1bb3df00a70c46575e55c24

    • SHA1

      794737f9d40f2239eff492525b603efed0de0177

    • SHA256

      6c9c308ce5c725fa5bf276517e4b246a46ad6a1e61a7296f0f250d20d00cbc69

    • SHA512

      aba4addbc9b0211afd1f8fd439546a288e8f017419b8998033603a83731a5a56b1ffea726733d614ae59aa03f26ca8380de2c503a39563d2afe47aa0fe999e75

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks