General

  • Target

    0b4fb13105c7e3b16a722ca4e005d62e44641fbf7577da4df131faa2700adba0

  • Size

    371KB

  • Sample

    230304-ht3pyadb68

  • MD5

    dd197f11560f49ea883793128a70c836

  • SHA1

    8be07fbbd72401189ac315ea1a55de4f950ff710

  • SHA256

    0b4fb13105c7e3b16a722ca4e005d62e44641fbf7577da4df131faa2700adba0

  • SHA512

    95a1bc42b5a5075a2a607f3e91c63355c2c74c48acb5dbd75c7fb3fda647d87dbe9c6e447768690bd69fa3dc621a3d4646ec35f3447d4e6bc3ea4d2ad7d9c843

  • SSDEEP

    6144:gIhxst6L9emfFsFzIBcuj71LBtZvTckJBrlIHEhIc:gIja6p7fFsWBcuVLBtZvTck3rbI

Malware Config

Targets

    • Target

      0b4fb13105c7e3b16a722ca4e005d62e44641fbf7577da4df131faa2700adba0

    • Size

      371KB

    • MD5

      dd197f11560f49ea883793128a70c836

    • SHA1

      8be07fbbd72401189ac315ea1a55de4f950ff710

    • SHA256

      0b4fb13105c7e3b16a722ca4e005d62e44641fbf7577da4df131faa2700adba0

    • SHA512

      95a1bc42b5a5075a2a607f3e91c63355c2c74c48acb5dbd75c7fb3fda647d87dbe9c6e447768690bd69fa3dc621a3d4646ec35f3447d4e6bc3ea4d2ad7d9c843

    • SSDEEP

      6144:gIhxst6L9emfFsFzIBcuj71LBtZvTckJBrlIHEhIc:gIja6p7fFsWBcuVLBtZvTck3rbI

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks