Overview

overview

10

Static

static

1

672aae645d...11.exe

windows7-x64

10

672aae645d...11.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b7b036556a229f36c6c9a0c410a9d29a.bin

  • Size

    229KB

  • Sample

    230214-b1ztashg92

  • MD5

    bd509594665bd73dfff9a3fd2eaea5e9

  • SHA1

    72c9ade1e32418052651f82ab53721cb568f4f4b

  • SHA256

    421b474d0a33ecef7db9f8d46e65ec038809eb2c86253aa16b6e14bdb6bdef41

  • SHA512

    081ac7bac8404a4eb1f06f9469af2d45af7b07aff43699d5a839ae63ad62e247850fea738b7f9e2e6048c292939e226b9ebc24562307a6371f43cbf2ecf45938

  • SSDEEP

    6144:xsHBRtxOqJIxi9ZucmV5N0JOJBZqDkxwle6Bis1rQ+8:xgBRt9J59QO8BZNf6p58

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      672aae645de2281a9e959171c4ca5104d7c8c7bba970f3cb4ab7d90a05233311.exe

    • Size

      281KB

    • MD5

      b7b036556a229f36c6c9a0c410a9d29a

    • SHA1

      f5e986da526db2c69658eee16beed9d6811a885f

    • SHA256

      672aae645de2281a9e959171c4ca5104d7c8c7bba970f3cb4ab7d90a05233311

    • SHA512

      e4a279179dd8776045f75194e0b6883d88a0db51fac5601592bcaa1286dd079b06cf59f9e1f0fe0fffd19ea25c464918d8a5c0a82d3fadac5cf736ab3c12a489

    • SSDEEP

      6144:JsC+v7gjyqlmDvd0myTwE0BkNWjujpVkOqOA:JV+zgjy2mDV0mykBk1tqO

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks