Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    084856b3faa3ef4e579020a494e2eee1944122bee53dfadce8ed43453a9c9677

  • Size

    358KB

  • Sample

    230307-jfrwysgf3t

  • MD5

    01e55a1c3fdb7e1cfbe27a74b3ce079f

  • SHA1

    22325dccd59de20864d0815bb99c24f89d36052e

  • SHA256

    084856b3faa3ef4e579020a494e2eee1944122bee53dfadce8ed43453a9c9677

  • SHA512

    b035350dde1bafc8a558db9f4b4dc04a3da311f6878ad7a7f99332a1530c1d8919d6225093b03d90cc0608ee1808c9dc97d91c1b5975ed77cb438a7146891fab

  • SSDEEP

    6144:aPLRL6CFcZcP2yhNI9c3WSbi8EljmhcdUL42LVCNOU:aP1L6MfpZ+8EJmh1FkNO

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      084856b3faa3ef4e579020a494e2eee1944122bee53dfadce8ed43453a9c9677

    • Size

      358KB

    • MD5

      01e55a1c3fdb7e1cfbe27a74b3ce079f

    • SHA1

      22325dccd59de20864d0815bb99c24f89d36052e

    • SHA256

      084856b3faa3ef4e579020a494e2eee1944122bee53dfadce8ed43453a9c9677

    • SHA512

      b035350dde1bafc8a558db9f4b4dc04a3da311f6878ad7a7f99332a1530c1d8919d6225093b03d90cc0608ee1808c9dc97d91c1b5975ed77cb438a7146891fab

    • SSDEEP

      6144:aPLRL6CFcZcP2yhNI9c3WSbi8EljmhcdUL42LVCNOU:aP1L6MfpZ+8EJmh1FkNO

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks