Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    416KB

  • Sample

    230208-t1c9eacb7z

  • MD5

    05cce02c0341e2ccb097cc41bac3a92a

  • SHA1

    d246a6d26cab9b912e778f34e0a088256e4f5c42

  • SHA256

    5bab80a861d325c8cf98c898f427da01676b465de826543fd435b7a7ffbafdb8

  • SHA512

    1abb5f377682e6674604f256eb78bcbbeccfb6133cd8140b96dcd2061ff9c8a17faef81b419b5bb2a9d8c9cc86ad034e0d2dbc28e892e415284c06c6a53371de

  • SSDEEP

    6144:L2Orptl2sH4+mNBHJ3mFAJQgxYiYs8W/sUxLiqeBlv:LX9Pj8p37JHYXoho9

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      416KB

    • MD5

      05cce02c0341e2ccb097cc41bac3a92a

    • SHA1

      d246a6d26cab9b912e778f34e0a088256e4f5c42

    • SHA256

      5bab80a861d325c8cf98c898f427da01676b465de826543fd435b7a7ffbafdb8

    • SHA512

      1abb5f377682e6674604f256eb78bcbbeccfb6133cd8140b96dcd2061ff9c8a17faef81b419b5bb2a9d8c9cc86ad034e0d2dbc28e892e415284c06c6a53371de

    • SSDEEP

      6144:L2Orptl2sH4+mNBHJ3mFAJQgxYiYs8W/sUxLiqeBlv:LX9Pj8p37JHYXoho9

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks