Overview

overview

10

Static

static

10

chatgpt.jpg.exe

windows7-x64

10

chatgpt.jpg.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    chatgpt.jpg.exe

  • Size

    788KB

  • Sample

    230512-vmytmaga9w

  • MD5

    7716f2344bcebd4b040077fc00fdb543

  • SHA1

    5731122f3b68380c50ff552fb78fb60841801492

  • SHA256

    8400d9d37f2e3865952dc0ec6b5428619f8252cc98768de3d02c9c2f21ea2e44

  • SHA512

    6e57934b9ba30e8b98a9c68f3627880fc7836286fe921ebe7257620cb8579465175b9f9467eeb7cf40820896784d710db3d767463ca94433d3d4b6a1e00b51a1

  • SSDEEP

    12288:64aegmJarthoMJbMey+FsFwjUF2XmUIkBsedkbOLWpshDNNKPJ8:6Ova3oPey+FsFwjI2VzdSOLWpAf

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      chatgpt.jpg.exe

    • Size

      788KB

    • MD5

      7716f2344bcebd4b040077fc00fdb543

    • SHA1

      5731122f3b68380c50ff552fb78fb60841801492

    • SHA256

      8400d9d37f2e3865952dc0ec6b5428619f8252cc98768de3d02c9c2f21ea2e44

    • SHA512

      6e57934b9ba30e8b98a9c68f3627880fc7836286fe921ebe7257620cb8579465175b9f9467eeb7cf40820896784d710db3d767463ca94433d3d4b6a1e00b51a1

    • SSDEEP

      12288:64aegmJarthoMJbMey+FsFwjUF2XmUIkBsedkbOLWpshDNNKPJ8:6Ova3oPey+FsFwjI2VzdSOLWpAf

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks