Overview

overview

10

Static

static

10

05eab99426...56.exe

windows7-x64

10

05eab99426...56.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05eab9942632ec70d5e94c4028fb4a56.exe

  • Size

    145KB

  • Sample

    230804-rpjkyabc37

  • MD5

    05eab9942632ec70d5e94c4028fb4a56

  • SHA1

    469f58388e6d525c4ebf56a95f3832b5f5c2e852

  • SHA256

    b8fd3283514925165f9d0bd7739e5469e9862d3af6b7b1ef39019ddf4e8c84b6

  • SHA512

    018e8efa0a9e7922341385c83691e90dcbf5f96fb42af611b1e0816c519d9d987e8d8ae1e892286bf81993cec590c6467bdddecf685ed2f032ddfb8ce2744418

  • SSDEEP

    3072:PV+m5chQmRSZ0TzdZOa7tnyrhtZ58e8ho:PjE/DGrhtD

Score
10/10
redline1infostealerspywarestealer

Malware Config

Extracted

Family

redline

Botnet

1

C2

185.218.3.123:13489

Attributes
  • auth_value

    2cd39f614a4c5067359e616f4bf4adec

Targets

    • Target

      05eab9942632ec70d5e94c4028fb4a56.exe

    • Size

      145KB

    • MD5

      05eab9942632ec70d5e94c4028fb4a56

    • SHA1

      469f58388e6d525c4ebf56a95f3832b5f5c2e852

    • SHA256

      b8fd3283514925165f9d0bd7739e5469e9862d3af6b7b1ef39019ddf4e8c84b6

    • SHA512

      018e8efa0a9e7922341385c83691e90dcbf5f96fb42af611b1e0816c519d9d987e8d8ae1e892286bf81993cec590c6467bdddecf685ed2f032ddfb8ce2744418

    • SSDEEP

      3072:PV+m5chQmRSZ0TzdZOa7tnyrhtZ58e8ho:PjE/DGrhtD

    Score
    10/10
    redline1infostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

2
T1552

Credentials In Files

2
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks