Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    file

  • Size

    418KB

  • Sample

    230209-bdhw9scd9v

  • MD5

    6c92aa5416ef0b1d384651e6e39f0f9a

  • SHA1

    292a3bc12423bd6d003a7e6efcae5f724af1c9e9

  • SHA256

    ba06dbb9474f3051a6f5ea7c7cec3fa103d2f764d59ff1b67f1d5456e0e142a1

  • SHA512

    e27a5f293fc75a39c628bfba8ffab898767490b5d47cee8cd53c677a0969df50b97baf52ecab78f2e5ffcdb5ae1becedcd583afba0b007a85ce6c94763e38a1d

  • SSDEEP

    6144:kMaPnA55h6aecejp9mwy2R1HsYxBExXZVsMw4QkeQGSmF:kMwny+lceXmnm1pxBExbswQkei

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      file

    • Size

      418KB

    • MD5

      6c92aa5416ef0b1d384651e6e39f0f9a

    • SHA1

      292a3bc12423bd6d003a7e6efcae5f724af1c9e9

    • SHA256

      ba06dbb9474f3051a6f5ea7c7cec3fa103d2f764d59ff1b67f1d5456e0e142a1

    • SHA512

      e27a5f293fc75a39c628bfba8ffab898767490b5d47cee8cd53c677a0969df50b97baf52ecab78f2e5ffcdb5ae1becedcd583afba0b007a85ce6c94763e38a1d

    • SSDEEP

      6144:kMaPnA55h6aecejp9mwy2R1HsYxBExXZVsMw4QkeQGSmF:kMwny+lceXmnm1pxBExbswQkei

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks