Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4336fa5991a4d6ddd46bbfb94459e597e3ebe16b906987601a2b70ca99e74364

  • Size

    378KB

  • Sample

    230309-lwx41sbg62

  • MD5

    48fe5e1b4fcd2854d1b76f197d3d5fec

  • SHA1

    be4e95f6330ff86093189132a1ce7681b0dda9c3

  • SHA256

    4336fa5991a4d6ddd46bbfb94459e597e3ebe16b906987601a2b70ca99e74364

  • SHA512

    b525d845a5c0277587791b9a6cc4e52de9722b3d7fbb0d099ac6a5a542d85ae3fecc8cd724deb99d262fc6cc57cebb7b971eb4b7bae30d8a2490bcaeb453e21b

  • SSDEEP

    6144:yh4cLkVntcvroGYLAhyCBPz94H3msAbNSArYF8sDW6K2VUF:yhtIVnAYLgpPJ+qrYF9Wd

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      4336fa5991a4d6ddd46bbfb94459e597e3ebe16b906987601a2b70ca99e74364

    • Size

      378KB

    • MD5

      48fe5e1b4fcd2854d1b76f197d3d5fec

    • SHA1

      be4e95f6330ff86093189132a1ce7681b0dda9c3

    • SHA256

      4336fa5991a4d6ddd46bbfb94459e597e3ebe16b906987601a2b70ca99e74364

    • SHA512

      b525d845a5c0277587791b9a6cc4e52de9722b3d7fbb0d099ac6a5a542d85ae3fecc8cd724deb99d262fc6cc57cebb7b971eb4b7bae30d8a2490bcaeb453e21b

    • SSDEEP

      6144:yh4cLkVntcvroGYLAhyCBPz94H3msAbNSArYF8sDW6K2VUF:yhtIVnAYLgpPJ+qrYF9Wd

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks