Overview

overview

10

Static

static

3

dfb1ec8dcc...96.exe

windows7-x64

10

dfb1ec8dcc...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfb1ec8dcc93b47fdab824e96.exe

  • Size

    402KB

  • Sample

    230704-q737mafc7s

  • MD5

    dfb1ec8dcc93b47fdab824e96350035c

  • SHA1

    253963a3d53331f16f551a47bc2c1066d0e2e671

  • SHA256

    9f3ee915e2cff2e19bcf2c9c2111d9d1cd41f98a98788fb654193b3c1c6c52b5

  • SHA512

    9d219ef0e4d24477bcc658a4f5b009aacf29e5d3ac4080d5924ff4876b3088616a6781e1f262ecdfc28661982270df91cf51f22b27731944ffbb48730d02f193

  • SSDEEP

    6144:oUSJ8aGJEKXMc95u72KdK96DVjvoXAI9QaHvkJUVB1sF0D14c:SJ8aGhccXE2KdK9yFwXDxHvke/sFa

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      dfb1ec8dcc93b47fdab824e96.exe

    • Size

      402KB

    • MD5

      dfb1ec8dcc93b47fdab824e96350035c

    • SHA1

      253963a3d53331f16f551a47bc2c1066d0e2e671

    • SHA256

      9f3ee915e2cff2e19bcf2c9c2111d9d1cd41f98a98788fb654193b3c1c6c52b5

    • SHA512

      9d219ef0e4d24477bcc658a4f5b009aacf29e5d3ac4080d5924ff4876b3088616a6781e1f262ecdfc28661982270df91cf51f22b27731944ffbb48730d02f193

    • SSDEEP

      6144:oUSJ8aGJEKXMc95u72KdK96DVjvoXAI9QaHvkJUVB1sF0D14c:SJ8aGhccXE2KdK9yFwXDxHvke/sFa

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks