Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    349KB

  • Sample

    230216-ztvsrsca39

  • MD5

    3a86a00c68572a8e68cba8107097874c

  • SHA1

    2254a8888fcfc99cfb97a12799d3b9d2ef3bee8a

  • SHA256

    e772973a3a2010435f221eff87ca8049922f311ba9f1fa43c0df637605795bf2

  • SHA512

    47d351247901cf72ecdac20762aa314016ab9f3873df88f062b8bc3be5a7622346662d7fb14d0bcec53ee63b9d0111ddfa620262e391680715b304cc7955d85f

  • SSDEEP

    6144:RdLN58l1NgarXWqpO+DOdOrbgqWtFHGOoEIqmSOb1ssZHEyk:RdJ56NgiBO+DO2b9WPnoEslxsikZ

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      349KB

    • MD5

      3a86a00c68572a8e68cba8107097874c

    • SHA1

      2254a8888fcfc99cfb97a12799d3b9d2ef3bee8a

    • SHA256

      e772973a3a2010435f221eff87ca8049922f311ba9f1fa43c0df637605795bf2

    • SHA512

      47d351247901cf72ecdac20762aa314016ab9f3873df88f062b8bc3be5a7622346662d7fb14d0bcec53ee63b9d0111ddfa620262e391680715b304cc7955d85f

    • SSDEEP

      6144:RdLN58l1NgarXWqpO+DOdOrbgqWtFHGOoEIqmSOb1ssZHEyk:RdJ56NgiBO+DO2b9WPnoEslxsikZ

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks