General

  • Target

    cdb91d68891826775281fc396a3e86e5.exe

  • Size

    302KB

  • Sample

    230312-xjmnasha3z

  • MD5

    cdb91d68891826775281fc396a3e86e5

  • SHA1

    039f5641e517aacda00cf463583e4baae47ff809

  • SHA256

    99e9b7b6e9a87362faf21f9b50a34ea195c7c00961d9f12984c9822062f3df65

  • SHA512

    5c810d309f6d763dbe30b950a872d802dd05a8ecdbc46cfe3ce3c0dbb255d3d1bf78ee24d5fa02328b8666bae66c4846e20c74cbe985987e53032b94f8726d1c

  • SSDEEP

    6144:Z2FeXtsgbTtG2513jqf1VrMQoNeOkR3YsSwRspztV:ZQotsgbBfj0jceOkR3xRsfV

Malware Config

Targets

    • Target

      cdb91d68891826775281fc396a3e86e5.exe

    • Size

      302KB

    • MD5

      cdb91d68891826775281fc396a3e86e5

    • SHA1

      039f5641e517aacda00cf463583e4baae47ff809

    • SHA256

      99e9b7b6e9a87362faf21f9b50a34ea195c7c00961d9f12984c9822062f3df65

    • SHA512

      5c810d309f6d763dbe30b950a872d802dd05a8ecdbc46cfe3ce3c0dbb255d3d1bf78ee24d5fa02328b8666bae66c4846e20c74cbe985987e53032b94f8726d1c

    • SSDEEP

      6144:Z2FeXtsgbTtG2513jqf1VrMQoNeOkR3YsSwRspztV:ZQotsgbBfj0jceOkR3xRsfV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks