Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    274KB

  • Sample

    230130-zvfp8sed6y

  • MD5

    89e5d833b584c80b158054f9e07a43a1

  • SHA1

    2cc4ffd94cc6eb0e99c360b2530292e3d82beaab

  • SHA256

    ed5a3ee4586cabf0258758173abc195404fc4ede6d1dcfe150de3cc439677944

  • SHA512

    a8bd65ab227ec68c37da7ef9d9579b3755045654a43af10a9bb95bd108ea212d9a62a0ce29528035b7ebabf25bc4e9c2ffed0f1509e038d1b868fb45e4000458

  • SSDEEP

    6144:iLH4iM+kKEYyaqQ1MK+/n1OMaPeUZ9g2F:i8iMBQylQS1OMaPZF

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      274KB

    • MD5

      89e5d833b584c80b158054f9e07a43a1

    • SHA1

      2cc4ffd94cc6eb0e99c360b2530292e3d82beaab

    • SHA256

      ed5a3ee4586cabf0258758173abc195404fc4ede6d1dcfe150de3cc439677944

    • SHA512

      a8bd65ab227ec68c37da7ef9d9579b3755045654a43af10a9bb95bd108ea212d9a62a0ce29528035b7ebabf25bc4e9c2ffed0f1509e038d1b868fb45e4000458

    • SSDEEP

      6144:iLH4iM+kKEYyaqQ1MK+/n1OMaPeUZ9g2F:i8iMBQylQS1OMaPZF

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks