Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d29c60bafed5ff652c07f69202931ac5e1f7d4ac031b66af9d47e881e072ad88

  • Size

    406KB

  • Sample

    230303-e5hx5aff8z

  • MD5

    b5e8e996a60b3f81b9937aa3085d4439

  • SHA1

    f69f2cfde6d7a0a0d9bb94c35162bfe1523891d2

  • SHA256

    d29c60bafed5ff652c07f69202931ac5e1f7d4ac031b66af9d47e881e072ad88

  • SHA512

    934e1aa7e1b890c308036e3f67a71be22c26a01439abb9bd84bb1475567969f3baee4d7dfcc3a25edc18ec9f0ac8feb202cc21a8a2f94c7a2a787735aa46e26a

  • SSDEEP

    6144:YPTPMLTgZdbd1Aofk7FNm88ywNxD23s7B23nhh6HkgF34ZGiby8ufgT:bvgZb1lQFY883xi3swVUIMh

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      d29c60bafed5ff652c07f69202931ac5e1f7d4ac031b66af9d47e881e072ad88

    • Size

      406KB

    • MD5

      b5e8e996a60b3f81b9937aa3085d4439

    • SHA1

      f69f2cfde6d7a0a0d9bb94c35162bfe1523891d2

    • SHA256

      d29c60bafed5ff652c07f69202931ac5e1f7d4ac031b66af9d47e881e072ad88

    • SHA512

      934e1aa7e1b890c308036e3f67a71be22c26a01439abb9bd84bb1475567969f3baee4d7dfcc3a25edc18ec9f0ac8feb202cc21a8a2f94c7a2a787735aa46e26a

    • SSDEEP

      6144:YPTPMLTgZdbd1Aofk7FNm88ywNxD23s7B23nhh6HkgF34ZGiby8ufgT:bvgZb1lQFY883xi3swVUIMh

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks