Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b843cbb9069b649e0254ab3a07b064cdcee2a58cf9b55086f4a29edd5e11a0b

  • Size

    304KB

  • Sample

    230311-dqzrnagc84

  • MD5

    158b497f39f3601b3c2efee8da2f5a81

  • SHA1

    ca83fd472b640d68dbd1ee4e7f811b2728dd8013

  • SHA256

    2b843cbb9069b649e0254ab3a07b064cdcee2a58cf9b55086f4a29edd5e11a0b

  • SHA512

    cb4b9a9b8a826bee448c3fd42b861429fb85dc985dc2fe9c5d81e6c89fefbd12cd188278b76fddde9083ad37c55116d008f63f92b677bf6c539bd86c4942b4e6

  • SSDEEP

    6144:TFLa2aI4H98I6vUR/nxy0xgUeLgUJAnyTYfqiXz2:xm2aI4Ht6vUR/nE0Re/enyTYfqi6

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      2b843cbb9069b649e0254ab3a07b064cdcee2a58cf9b55086f4a29edd5e11a0b

    • Size

      304KB

    • MD5

      158b497f39f3601b3c2efee8da2f5a81

    • SHA1

      ca83fd472b640d68dbd1ee4e7f811b2728dd8013

    • SHA256

      2b843cbb9069b649e0254ab3a07b064cdcee2a58cf9b55086f4a29edd5e11a0b

    • SHA512

      cb4b9a9b8a826bee448c3fd42b861429fb85dc985dc2fe9c5d81e6c89fefbd12cd188278b76fddde9083ad37c55116d008f63f92b677bf6c539bd86c4942b4e6

    • SSDEEP

      6144:TFLa2aI4H98I6vUR/nxy0xgUeLgUJAnyTYfqiXz2:xm2aI4Ht6vUR/nE0Re/enyTYfqi6

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks