General

  • Target

    0724ef7fe65ee25f3e5010fc88a4360bebdeb83ec413200ab996f47087ec087d

  • Size

    286KB

  • Sample

    230303-2c2wvsbg44

  • MD5

    b4ec21aebf57494e8b6cd78a4721e6c8

  • SHA1

    840be746a241f262204ad8fbac946d16a9d7f84e

  • SHA256

    0724ef7fe65ee25f3e5010fc88a4360bebdeb83ec413200ab996f47087ec087d

  • SHA512

    0fe99d51b1bb324153c213d9709c374e3af7ad806fec9bb6608af95b3a68790526d9a5e77f3d6a1819f60fa355acc9c615dc6549281dc20467311f5148684c21

  • SSDEEP

    6144:LMHx24zxl4Ea4k17pmsBup4J+0dIMUxTHIBTJ0BJijbzyj:LMRhzzwsI+4nmJxsBt0wP2j

Malware Config

Targets

    • Target

      0724ef7fe65ee25f3e5010fc88a4360bebdeb83ec413200ab996f47087ec087d

    • Size

      286KB

    • MD5

      b4ec21aebf57494e8b6cd78a4721e6c8

    • SHA1

      840be746a241f262204ad8fbac946d16a9d7f84e

    • SHA256

      0724ef7fe65ee25f3e5010fc88a4360bebdeb83ec413200ab996f47087ec087d

    • SHA512

      0fe99d51b1bb324153c213d9709c374e3af7ad806fec9bb6608af95b3a68790526d9a5e77f3d6a1819f60fa355acc9c615dc6549281dc20467311f5148684c21

    • SSDEEP

      6144:LMHx24zxl4Ea4k17pmsBup4J+0dIMUxTHIBTJ0BJijbzyj:LMRhzzwsI+4nmJxsBt0wP2j

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks