Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    389KB

  • Sample

    230205-kepwmsgh86

  • MD5

    1a83beba2e0d0d46a3488ac434f1885f

  • SHA1

    15904e40dd85537d64416b5cb46e8c9022f36df0

  • SHA256

    3c860282284223ce741ebe8ca857a2a4fcc3eecd710dd1776d9f9273fff80de4

  • SHA512

    5e30742edb4742f0b09b039dd604bd76d9f7927a0d1b3b37ae7b670e0a1481a72c43740f4df263b618581bd315c25611cfbe966aada0ec22b75735f6d8b41d90

  • SSDEEP

    3072:WMvOhhKvwqUGLLtyqWEn56k7O3AYQgzj7pugLnHgD1TAu/cwVnLgyPYRRKCd5Ev3:WMvhYrGLL8qLq4G3cfcqX6j5EKWSt8k

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      389KB

    • MD5

      1a83beba2e0d0d46a3488ac434f1885f

    • SHA1

      15904e40dd85537d64416b5cb46e8c9022f36df0

    • SHA256

      3c860282284223ce741ebe8ca857a2a4fcc3eecd710dd1776d9f9273fff80de4

    • SHA512

      5e30742edb4742f0b09b039dd604bd76d9f7927a0d1b3b37ae7b670e0a1481a72c43740f4df263b618581bd315c25611cfbe966aada0ec22b75735f6d8b41d90

    • SSDEEP

      3072:WMvOhhKvwqUGLLtyqWEn56k7O3AYQgzj7pugLnHgD1TAu/cwVnLgyPYRRKCd5Ev3:WMvhYrGLL8qLq4G3cfcqX6j5EKWSt8k

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks