Overview

overview

10

Static

static

1

6b956e9f4a...93.exe

windows7-x64

10

6b956e9f4a...93.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    52ae2ebb8670fd969ccc651e671c4d84.bin

  • Size

    241KB

  • Sample

    230206-kxehmagc5s

  • MD5

    d27c311add3c88279639b8452a192544

  • SHA1

    936cc07cb9751beb506ff20715276808cfdec4b5

  • SHA256

    bb6ae0e27a449eac871cdd8463593ddcb1712a10ff121dcaa707b22f06a22f6d

  • SHA512

    463fa1418c1dbae1226f84b7d1194bbea6b2fc5a10497f29824cd5070b48bee62dfff031ad9d566a74e92b0a894d6de193151f49a885d334f56452439a4ee7f3

  • SSDEEP

    6144:BZ6UosOtrHFv4nJdHDDHqbemwN0vST7mfS:BZRIv4HqbePNVT7m6

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      6b956e9f4afb4aca53161382a250c55cc187f1d1b89bc232c36b128b57dfa193.exe

    • Size

      388KB

    • MD5

      52ae2ebb8670fd969ccc651e671c4d84

    • SHA1

      544d8e7d83ff4e78fb280ef96f2af4cd5c943230

    • SHA256

      6b956e9f4afb4aca53161382a250c55cc187f1d1b89bc232c36b128b57dfa193

    • SHA512

      52e532e04dd538ee1d494fb71fb1b58ffd1251c4df0d9d666f0c93a529b1c87282a091a33086fa849031d3b0a6df3c1a1e72c77effc6b15d9653b740be249c9d

    • SSDEEP

      6144:4g/XLCjuqJTYbMi0ZBPECpOaNTtrxDzMyt3GyvV:4g/cuqegHPDnxJzMcWI

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks