Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ee42925b818e3c9fe7a12f25e366129b4e6f8fc243a5ff04388c2996f84280b

  • Size

    408KB

  • Sample

    220119-hthd1afgfk

  • MD5

    d692c7afc2de522ce3a14dc1aba2327c

  • SHA1

    675e96c541614f1dd904b6368b024c238f9b22f7

  • SHA256

    3ee42925b818e3c9fe7a12f25e366129b4e6f8fc243a5ff04388c2996f84280b

  • SHA512

    ddbcc3a22e4fabdcdee9d4040d5accb786d707be1e77388d4682113b88f2cd27605b5bcbedc05a67264200543e7e57c5a4c5ce2cd035bd359b912c55e12fa5fd

Score
10/10
redlinenonamediscoveryinfostealerspywarestealer

Malware Config

Extracted

Family

redline

Botnet

noname

C2

185.215.113.29:34865

Targets

    • Target

      3ee42925b818e3c9fe7a12f25e366129b4e6f8fc243a5ff04388c2996f84280b

    • Size

      408KB

    • MD5

      d692c7afc2de522ce3a14dc1aba2327c

    • SHA1

      675e96c541614f1dd904b6368b024c238f9b22f7

    • SHA256

      3ee42925b818e3c9fe7a12f25e366129b4e6f8fc243a5ff04388c2996f84280b

    • SHA512

      ddbcc3a22e4fabdcdee9d4040d5accb786d707be1e77388d4682113b88f2cd27605b5bcbedc05a67264200543e7e57c5a4c5ce2cd035bd359b912c55e12fa5fd

    Score
    10/10
    redlinenonamediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks