Overview

overview

10

Static

static

1

cb04d5432b...ca.exe

windows7-x64

10

cb04d5432b...ca.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c453de865d8e5c6af8d9f0ccb13620f.bin

  • Size

    243KB

  • Sample

    230302-bvaxzsae8v

  • MD5

    c4b0d066536d01132f2a45ba4cd09d02

  • SHA1

    a0b477f40349235651a168ffc90dd63a13ddbe97

  • SHA256

    bf4a49f9837298cb288f29eaa7a781c840ab8fc94fb6d8daa68eda044f85e1e2

  • SHA512

    9ad9c5cfe093f0694f2300762fc40852b23d4fd07030fb2cac780d1bee9e0f587f4a30716f9e5b487706fe64db25dc6d192b720871937377e2b8736a29637001

  • SSDEEP

    6144:qv5ROvyXk5QYLfhFnar//JdpuQ0qang3/:gQphPar//J+GIg3/

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      cb04d5432bc4d8aab459870e3c221d6aebcbd14fad9a797e2a058ddfbd0e2fca.exe

    • Size

      370KB

    • MD5

      8c453de865d8e5c6af8d9f0ccb13620f

    • SHA1

      3fa8e8a2b1a586c60a87762619bca431cbfc1466

    • SHA256

      cb04d5432bc4d8aab459870e3c221d6aebcbd14fad9a797e2a058ddfbd0e2fca

    • SHA512

      4e96d6120e961c40bc73589612e4d8908d48fed0492fb7aaefe5cab43fa9fe60dfd3fa908e2f261f46f4511737328c8a62925259d88dfc30b6695bf1f0aae5bc

    • SSDEEP

      6144:aLvOBgNe4se4terELVcl18YridaCcbISLy1:aLOBIe24tegLVclO0id/c7

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks