Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32dca19d67fd5967d4466f680e91341637b0183c0ff3121ed87a03c8f9845d06

  • Size

    302KB

  • Sample

    230314-m475maha4z

  • MD5

    870626acfa20dfe2363166fe3d381c2f

  • SHA1

    32ac4c5692346b5f7b07320fcb1747e1331772df

  • SHA256

    32dca19d67fd5967d4466f680e91341637b0183c0ff3121ed87a03c8f9845d06

  • SHA512

    2360d95e16599545096adb7f41c4ee9ac0361271830d6854f8e637b21354cb805921c96e12ef948c19a8da30f3cbd01814f97b082f060f5ea73ae62f73ad8c09

  • SSDEEP

    6144:jOlsBaUkymkCXo9g/fH5C5RMgeZ+ORW+Fkzs:6lsBgvkCZ/UuFZ70qL

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      32dca19d67fd5967d4466f680e91341637b0183c0ff3121ed87a03c8f9845d06

    • Size

      302KB

    • MD5

      870626acfa20dfe2363166fe3d381c2f

    • SHA1

      32ac4c5692346b5f7b07320fcb1747e1331772df

    • SHA256

      32dca19d67fd5967d4466f680e91341637b0183c0ff3121ed87a03c8f9845d06

    • SHA512

      2360d95e16599545096adb7f41c4ee9ac0361271830d6854f8e637b21354cb805921c96e12ef948c19a8da30f3cbd01814f97b082f060f5ea73ae62f73ad8c09

    • SSDEEP

      6144:jOlsBaUkymkCXo9g/fH5C5RMgeZ+ORW+Fkzs:6lsBgvkCZ/UuFZ70qL

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks