Overview

overview

10

Static

static

3

bc768934b1...0e.exe

windows7-x64

7

bc768934b1...0e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc768934b1dc64abd7792e8d9072a0e2b27dfa5137a0412033f46848fb39e10e.bin

  • Size

    362KB

  • Sample

    230505-xy1hpsgf62

  • MD5

    bdeb6b5c8254bb1dd175fc0345d61499

  • SHA1

    7b71c227098ad9a54021334d05ce4d5345893186

  • SHA256

    bc768934b1dc64abd7792e8d9072a0e2b27dfa5137a0412033f46848fb39e10e

  • SHA512

    c1fad351e00a5ba468ecca63f3412dd4566d5aab27ea26a45980a953f532f03afe704ed0b6afeea11dd39fccc7064a73207e6b924fd302135b734280e6076cf7

  • SSDEEP

    6144:0xeI7J+VgM4bEkjwpyHJuXDUBkZizlli550F68oIVNv:0xeI0VgzbTLHJuXDUBkc2iHVN

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      bc768934b1dc64abd7792e8d9072a0e2b27dfa5137a0412033f46848fb39e10e.bin

    • Size

      362KB

    • MD5

      bdeb6b5c8254bb1dd175fc0345d61499

    • SHA1

      7b71c227098ad9a54021334d05ce4d5345893186

    • SHA256

      bc768934b1dc64abd7792e8d9072a0e2b27dfa5137a0412033f46848fb39e10e

    • SHA512

      c1fad351e00a5ba468ecca63f3412dd4566d5aab27ea26a45980a953f532f03afe704ed0b6afeea11dd39fccc7064a73207e6b924fd302135b734280e6076cf7

    • SSDEEP

      6144:0xeI7J+VgM4bEkjwpyHJuXDUBkZizlli550F68oIVNv:0xeI0VgzbTLHJuXDUBkc2iHVN

    Score
    10/10
    discoveryspywarestealerredlineinfostealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks