Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d7ecda509068ff994138963c324c0b4fdcbed5dc28118b8dc4f5f1f9a07e7c1

  • Size

    303KB

  • Sample

    230308-y4h2aagg97

  • MD5

    7b0cb384d2693a44fdcd628c4df9e2aa

  • SHA1

    931f4ad68379da6b7bea52c36458973f0119a222

  • SHA256

    8d7ecda509068ff994138963c324c0b4fdcbed5dc28118b8dc4f5f1f9a07e7c1

  • SHA512

    b682f37c3d8bf575dca336bf454a204a4d3732ddf4af4f0ec17a0f0c404b5d3f73dbb0243bbc32d8629cd8728f80746276b8b0df798dce3f456c2c28e945e226

  • SSDEEP

    6144:mohoHzgLidZ+drNHMQTqKqKJusgvypAWNfwplgknRk4Ngqdj4:RWHzg0ONpPZvelgk5ddj

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      8d7ecda509068ff994138963c324c0b4fdcbed5dc28118b8dc4f5f1f9a07e7c1

    • Size

      303KB

    • MD5

      7b0cb384d2693a44fdcd628c4df9e2aa

    • SHA1

      931f4ad68379da6b7bea52c36458973f0119a222

    • SHA256

      8d7ecda509068ff994138963c324c0b4fdcbed5dc28118b8dc4f5f1f9a07e7c1

    • SHA512

      b682f37c3d8bf575dca336bf454a204a4d3732ddf4af4f0ec17a0f0c404b5d3f73dbb0243bbc32d8629cd8728f80746276b8b0df798dce3f456c2c28e945e226

    • SSDEEP

      6144:mohoHzgLidZ+drNHMQTqKqKJusgvypAWNfwplgknRk4Ngqdj4:RWHzg0ONpPZvelgk5ddj

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks