General

  • Target

    1d1ed1d3d73bedbbe2d76c7b25785d86.exe

  • Size

    341KB

  • Sample

    230819-ez7pashd61

  • MD5

    1d1ed1d3d73bedbbe2d76c7b25785d86

  • SHA1

    b454688ce1b400e037af546909fbc8cab87984b0

  • SHA256

    72ed9a6d3da7acd289de898ea0657b9265767a8659c29de1a864b95aa501c232

  • SHA512

    ba8a768c6e11038dcdfb845bcd3caea128d8864c70fb1128aa348d06ccd77fe54ee441df015c22bec43325c576a90502aa39e04f8fdeffac800c79f2141e81f4

  • SSDEEP

    6144:xEV3quCt4RQ5644ehC6V3kf8MM2bdpN1aLTi:2qAI48+M2bd1

Malware Config

Targets

    • Target

      1d1ed1d3d73bedbbe2d76c7b25785d86.exe

    • Size

      341KB

    • MD5

      1d1ed1d3d73bedbbe2d76c7b25785d86

    • SHA1

      b454688ce1b400e037af546909fbc8cab87984b0

    • SHA256

      72ed9a6d3da7acd289de898ea0657b9265767a8659c29de1a864b95aa501c232

    • SHA512

      ba8a768c6e11038dcdfb845bcd3caea128d8864c70fb1128aa348d06ccd77fe54ee441df015c22bec43325c576a90502aa39e04f8fdeffac800c79f2141e81f4

    • SSDEEP

      6144:xEV3quCt4RQ5644ehC6V3kf8MM2bdpN1aLTi:2qAI48+M2bd1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks