Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6db2aec253c0adc21dc8c4359ef205296396634e90bc11197c1e9ff5b58ea882

  • Size

    303KB

  • Sample

    230311-j8z32aha27

  • MD5

    8eb2b8d7648976494ccdc8446daaaecc

  • SHA1

    c57e84d4a72240cb8197605600c91a64babb5ee2

  • SHA256

    6db2aec253c0adc21dc8c4359ef205296396634e90bc11197c1e9ff5b58ea882

  • SHA512

    67aa2599f4496c25f972b518dfdfd2d502c4ea98a788d418bde2c519e12707b68e49f082f551e7db6651c9fa916e20fcac0c737cd48dac0df39bcec106e653d5

  • SSDEEP

    6144:3bFGmNwwIUXyxNJAybC1kaa5gM2v7oF1czTlszKezV:51NwwIUXyxPtbC1kaVMukF1TOc

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      6db2aec253c0adc21dc8c4359ef205296396634e90bc11197c1e9ff5b58ea882

    • Size

      303KB

    • MD5

      8eb2b8d7648976494ccdc8446daaaecc

    • SHA1

      c57e84d4a72240cb8197605600c91a64babb5ee2

    • SHA256

      6db2aec253c0adc21dc8c4359ef205296396634e90bc11197c1e9ff5b58ea882

    • SHA512

      67aa2599f4496c25f972b518dfdfd2d502c4ea98a788d418bde2c519e12707b68e49f082f551e7db6651c9fa916e20fcac0c737cd48dac0df39bcec106e653d5

    • SSDEEP

      6144:3bFGmNwwIUXyxNJAybC1kaa5gM2v7oF1czTlszKezV:51NwwIUXyxPtbC1kaVMukF1TOc

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks