Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a58d5b56513def6a92e35076f234b6070b66adbc6025be4dc1d8d098389e9f97

  • Size

    372KB

  • Sample

    230302-zcpv7aec5s

  • MD5

    bc6f956ec380dd6e2432be50bc4e4da2

  • SHA1

    dd4b79ba6900788f8460ae0c1698ff0e73087cee

  • SHA256

    a58d5b56513def6a92e35076f234b6070b66adbc6025be4dc1d8d098389e9f97

  • SHA512

    be4b7da101dc748024251148fd8b393589909dbe0d4f3196a1d531dbd1d4bc8b6750d50a820b03dcfcaed1b56df034fb94612020721e25d2ec2801d8caef4bdf

  • SSDEEP

    6144:VO+AjKOLAuBOZJFp05AeSiS0NaEP6Jgfqx51pOp7:Vh/OcucZ7EKiS2alg+pE

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      a58d5b56513def6a92e35076f234b6070b66adbc6025be4dc1d8d098389e9f97

    • Size

      372KB

    • MD5

      bc6f956ec380dd6e2432be50bc4e4da2

    • SHA1

      dd4b79ba6900788f8460ae0c1698ff0e73087cee

    • SHA256

      a58d5b56513def6a92e35076f234b6070b66adbc6025be4dc1d8d098389e9f97

    • SHA512

      be4b7da101dc748024251148fd8b393589909dbe0d4f3196a1d531dbd1d4bc8b6750d50a820b03dcfcaed1b56df034fb94612020721e25d2ec2801d8caef4bdf

    • SSDEEP

      6144:VO+AjKOLAuBOZJFp05AeSiS0NaEP6Jgfqx51pOp7:Vh/OcucZ7EKiS2alg+pE

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks