Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    453KB

  • Sample

    230210-qsdcnabd89

  • MD5

    ba437af00a544491bcf2faca07ac0b43

  • SHA1

    0f66dd1ec99872ce931e807bc5af7a0721ebdba9

  • SHA256

    7912924467268e36b4fab8b898ee908e5d9e860b0745db8af995bd51e13c1159

  • SHA512

    2a87ccbb24bc159932d275bd58068c7bd954ded7b3e7866e3ecedff805ce9768863c23d255006e9ad810f8f07da5fb757952d499a9c6606b06224c4425a12fbb

  • SSDEEP

    12288:EIaTcLok3uSBREuYAO/f2U3K5PSsnfWr:EC3U2U3K5asnfW

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      453KB

    • MD5

      ba437af00a544491bcf2faca07ac0b43

    • SHA1

      0f66dd1ec99872ce931e807bc5af7a0721ebdba9

    • SHA256

      7912924467268e36b4fab8b898ee908e5d9e860b0745db8af995bd51e13c1159

    • SHA512

      2a87ccbb24bc159932d275bd58068c7bd954ded7b3e7866e3ecedff805ce9768863c23d255006e9ad810f8f07da5fb757952d499a9c6606b06224c4425a12fbb

    • SSDEEP

      12288:EIaTcLok3uSBREuYAO/f2U3K5PSsnfWr:EC3U2U3K5asnfW

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks