Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f77524554772f37a01419b6b9fea365ee950c1e5fab6232d82e7c47bd22cd59e

  • Size

    375KB

  • Sample

    220210-t7rqdahag9

  • MD5

    4dafe854ab91e89368779995e0d4c2af

  • SHA1

    1d7ddd2021a71dbd67c072e20131e90486308611

  • SHA256

    f77524554772f37a01419b6b9fea365ee950c1e5fab6232d82e7c47bd22cd59e

  • SHA512

    d528135bd822e6dea5b725c08c28987e03ddf0cadc0431c6ae14f92953e4d4df367f55abbad32a144d1358d1d9cac0418e999d09dc262e96290c82ba3a74d7e3

Score
10/10
redlineruzkikakoytodiscoveryinfostealerspywarestealer

Malware Config

Extracted

Family

redline

Botnet

ruzkiKAKOYTO

C2

185.215.113.29:20819

Targets

    • Target

      f77524554772f37a01419b6b9fea365ee950c1e5fab6232d82e7c47bd22cd59e

    • Size

      375KB

    • MD5

      4dafe854ab91e89368779995e0d4c2af

    • SHA1

      1d7ddd2021a71dbd67c072e20131e90486308611

    • SHA256

      f77524554772f37a01419b6b9fea365ee950c1e5fab6232d82e7c47bd22cd59e

    • SHA512

      d528135bd822e6dea5b725c08c28987e03ddf0cadc0431c6ae14f92953e4d4df367f55abbad32a144d1358d1d9cac0418e999d09dc262e96290c82ba3a74d7e3

    Score
    10/10
    redlineruzkikakoytodiscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks