General

  • Target

    5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c

  • Size

    370KB

  • Sample

    230505-w3h9jsfb8x

  • MD5

    5465c62964a4c57ca968d6ba5a62658c

  • SHA1

    ca67a4513a847a1fb1153488da4fb599c00feb95

  • SHA256

    5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c

  • SHA512

    245e4d8594497417cdf002589c27a062d28cdc0ae1571ad4e329b0af5b36c88a740ef2a24931b60026c6036fbfda24f4d8316c56520887e5d23590b071e6b121

  • SSDEEP

    6144:Tf64bwCDP0Of9W1WmqcglBpSGVrEKkUPSAM33VUmaeQxXI:Tfpb/DP0OlWg/5BpHV4KkUPS7HVkI

Malware Config

Targets

    • Target

      5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c

    • Size

      370KB

    • MD5

      5465c62964a4c57ca968d6ba5a62658c

    • SHA1

      ca67a4513a847a1fb1153488da4fb599c00feb95

    • SHA256

      5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c

    • SHA512

      245e4d8594497417cdf002589c27a062d28cdc0ae1571ad4e329b0af5b36c88a740ef2a24931b60026c6036fbfda24f4d8316c56520887e5d23590b071e6b121

    • SSDEEP

      6144:Tf64bwCDP0Of9W1WmqcglBpSGVrEKkUPSAM33VUmaeQxXI:Tfpb/DP0OlWg/5BpHV4KkUPS7HVkI

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks