Overview

overview

10

Static

static

a1321aea2a...a6.exe

windows7_x64

10

a1321aea2a...a6.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a1321aea2ae27640565f0b8cfed2e4a6.exe
  • Size 1.6MB
  • Sample220414-r6ey3sdbbl
  • SHA256 986b1e107fdcf5ba3eec492626b08ea3d4e2091931d10b196a11c790a6f43d0c
  • MD5 SHA1 SHA512
Score
10/10
metastealerredlineinfostealerspywarestealer

Malware Config

Extracted

Family

  • redline

C2

  • 91.243.59.43:41097

Attributes
  • auth_value

    d9c935b15ec629aafe8b28a63a1343f9

Targets

    • Target
      a1321aea2ae27640565f0b8cfed2e4a6.exe
    • Size 1.6MB
    • SHA256 986b1e107fdcf5ba3eec492626b08ea3d4e2091931d10b196a11c790a6f43d0c
    • MD5 SHA1 SHA512
    Score
    10/10
    redlineinfostealerspywaremetastealerstealer

    • Meta Stealer Stealer

      Meta Stealer steals passwords stored in browsers, written in C++.

      stealermetastealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks