Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a903d6584e79610794e1527aa1fe8a2e560c854cd9e66d7d5c897a224c443bf

  • Size

    293KB

  • Sample

    230314-t4zxksae7t

  • MD5

    45e03dc543a91894088dc96394856135

  • SHA1

    d73474f0536d6c709e7d006556e005801d425e9e

  • SHA256

    0a903d6584e79610794e1527aa1fe8a2e560c854cd9e66d7d5c897a224c443bf

  • SHA512

    7854bea706c6988dd104ed3c95beb7ade36eaced1dad8d6b1c266a3102bff06fada75d5eda4c3c5cc252e776be7a617ec65dd4d214c279d3741ae85f62cf404a

  • SSDEEP

    6144:7PAj2Cc8Lr6myVeKCplIjGwBz7PyDHy9V:DASG1y4/qtBz7PyDHC

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      0a903d6584e79610794e1527aa1fe8a2e560c854cd9e66d7d5c897a224c443bf

    • Size

      293KB

    • MD5

      45e03dc543a91894088dc96394856135

    • SHA1

      d73474f0536d6c709e7d006556e005801d425e9e

    • SHA256

      0a903d6584e79610794e1527aa1fe8a2e560c854cd9e66d7d5c897a224c443bf

    • SHA512

      7854bea706c6988dd104ed3c95beb7ade36eaced1dad8d6b1c266a3102bff06fada75d5eda4c3c5cc252e776be7a617ec65dd4d214c279d3741ae85f62cf404a

    • SSDEEP

      6144:7PAj2Cc8Lr6myVeKCplIjGwBz7PyDHy9V:DASG1y4/qtBz7PyDHC

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks