Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    956ec9565cdd0ec189388af5b357ef8c4cbb09a54a243a5679bb93aa099e56e4

  • Size

    416KB

  • Sample

    230306-vzzaxsec84

  • MD5

    99bcd7e152f052ea1d4197fa3ac50019

  • SHA1

    d3cce4ba490f4688546ad2ece1cbcb34612a87a8

  • SHA256

    956ec9565cdd0ec189388af5b357ef8c4cbb09a54a243a5679bb93aa099e56e4

  • SHA512

    6dab57f8e6438f54bafc7f47aabba1fb91e7fdf2a6b69f8e6e9188d54209d9a5729d09994505b09b431d6a07a3ff7c1b366fa0898e5adee82238a93674cb9894

  • SSDEEP

    12288:h3s0bcQzTyNKVzeFo64SRNXG5/y5uljX:vcQzuKMt4SnGE4

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      956ec9565cdd0ec189388af5b357ef8c4cbb09a54a243a5679bb93aa099e56e4

    • Size

      416KB

    • MD5

      99bcd7e152f052ea1d4197fa3ac50019

    • SHA1

      d3cce4ba490f4688546ad2ece1cbcb34612a87a8

    • SHA256

      956ec9565cdd0ec189388af5b357ef8c4cbb09a54a243a5679bb93aa099e56e4

    • SHA512

      6dab57f8e6438f54bafc7f47aabba1fb91e7fdf2a6b69f8e6e9188d54209d9a5729d09994505b09b431d6a07a3ff7c1b366fa0898e5adee82238a93674cb9894

    • SSDEEP

      12288:h3s0bcQzTyNKVzeFo64SRNXG5/y5uljX:vcQzuKMt4SnGE4

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks