Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f53ca674b7c97381e220c8969815b9273de205ef97930d68d516346802a892d

  • Size

    705KB

  • Sample

    211025-bw4xfsgddm

  • MD5

    a834c078222db659fa6fb3846f186478

  • SHA1

    1e7a8d6741bfa645d3f3493a7120b97b89c0812d

  • SHA256

    6f53ca674b7c97381e220c8969815b9273de205ef97930d68d516346802a892d

  • SHA512

    778518d7e7aa18df8c1eafb4e6bb38f1ad15ed46b357431485657d62ae20964a2f254b520dcd578a73accbdbbfa74cc9c734c198932d1f15ecfd642f7a93e2b0

Score
10/10
redlinediscoveryinfostealerspywarestealersuricata

Malware Config

Targets

    • Target

      6f53ca674b7c97381e220c8969815b9273de205ef97930d68d516346802a892d

    • Size

      705KB

    • MD5

      a834c078222db659fa6fb3846f186478

    • SHA1

      1e7a8d6741bfa645d3f3493a7120b97b89c0812d

    • SHA256

      6f53ca674b7c97381e220c8969815b9273de205ef97930d68d516346802a892d

    • SHA512

      778518d7e7aa18df8c1eafb4e6bb38f1ad15ed46b357431485657d62ae20964a2f254b520dcd578a73accbdbbfa74cc9c734c198932d1f15ecfd642f7a93e2b0

    Score
    10/10
    redlinediscoveryinfostealerspywarestealersuricata

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • suricata: ET MALWARE AutoHotkey Downloader Checkin via IPLogger

      suricata: ET MALWARE AutoHotkey Downloader Checkin via IPLogger

      suricata

    • suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

      suricata

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks