Overview

overview

10

Static

static

1

a1a5291987...6a.exe

windows7-x64

10

a1a5291987...6a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    20350877fa1ecd6d6ce9a81e9ce56ae8.bin

  • Size

    235KB

  • Sample

    230213-bgghlshg55

  • MD5

    23cf967680f4ac30447636e7ee26140c

  • SHA1

    7b229f44010b151018ad05f7a5052423389fb25a

  • SHA256

    b634b41186760e33823912ff43161530a86fcd05aeb3e1f630d0650c08d6c820

  • SHA512

    d466eebfb17072f455ed850670895308e45cecdc23613865a3be978cb4d3c45e93e505864217d0126a913e5fdecff483a9ab23a70c5e02c85231ffc68509f8eb

  • SSDEEP

    6144:OF1LKKUN9X0R4eAMuRHwsujs8urzmvCX+bEAIFdK:OFVJUN9X0R4jJWsuAdrzxubE7FdK

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      a1a5291987b7f0e1184cf84656632d911f477601cb8a7a65d5fec460aad7ec6a.exe

    • Size

      291KB

    • MD5

      20350877fa1ecd6d6ce9a81e9ce56ae8

    • SHA1

      9574dca935284c704611e92c3d9078a309d5ae44

    • SHA256

      a1a5291987b7f0e1184cf84656632d911f477601cb8a7a65d5fec460aad7ec6a

    • SHA512

      1c629d71ed44b74ae42a342f5310a353e4845c244a2e487288ab6cd8b79e847e4c061e6efe82ad5db4d9fc32e6a36dfe9fc16075e48882fefa0576a64b00947c

    • SSDEEP

      6144:DOSOPJyUipdrnUvpwwdhgoEORvAqa6KY+ov7:DOobUhwwdh1RvAqa6K5

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks