Overview

overview

10

Static

static

1

060ab710f9...33.exe

windows7-x64

10

060ab710f9...33.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cd0c90fb04ca97829b346b56905ef5b8.bin

  • Size

    235KB

  • Sample

    230211-b8e4vsbg65

  • MD5

    d926c3358fa90ef776bb3448920a597f

  • SHA1

    b220c4b9139a3c0224c3f6a9e6fefe284f1cb2c2

  • SHA256

    55044e0e1587adf01c456edb9a31e38dd82423f47f0359853e2cf5ea55011b96

  • SHA512

    9e440ba5eb4cdeedb98e580533e3471b100d2814f03cecc52b6f7e51599935354fd066e0b829716ec0314788d098890827894ef93278372fd5b56c485d2fae88

  • SSDEEP

    3072:7Yu6WTH7HFSXJ3QIYnix2O+eT/hGT1ahOjCnFMiXFtEkAEBniT0W+bmBT5C821HK:fHFSZ/IzET/U1aFMi/EkNZ/bUCOyAN

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      060ab710f9111bc490572643d316faf169ee396ed968697b35bc19362bb9c933.exe

    • Size

      290KB

    • MD5

      cd0c90fb04ca97829b346b56905ef5b8

    • SHA1

      4b17a2c25105980619355b5a3f4694a828b8bdeb

    • SHA256

      060ab710f9111bc490572643d316faf169ee396ed968697b35bc19362bb9c933

    • SHA512

      957149949ee4388f5855ef9d8c81c9142586b310670a5aad62a40f02ce4863d48d6597e9356567537e84d23ed5a187f9200600d40a2c7d0a7d048980b7bcca5f

    • SSDEEP

      6144:OFZ/EftuyI0Rs8doiujbpUSNAS/yuFzn65Vwk7yCHbQns8j161:OFMtuym8dodjbpt2puFm97DQs+1

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks