General

  • Target

    f8ffc252796874ef35f1da7be7a7eb081905f81863cda673513aa422fde9b8d7

  • Size

    1.9MB

  • Sample

    230821-h5mg4adc4y

  • MD5

    d2a9d9e182178473cbd9f1e018f93efa

  • SHA1

    625b249b94945eb2dda93139831f9197999b1391

  • SHA256

    f8ffc252796874ef35f1da7be7a7eb081905f81863cda673513aa422fde9b8d7

  • SHA512

    f79f0b5ca4d861461c777edc0e9e599f04baa6c237f4146be11507827e830a6258f3549b0449069d057bcd0ffc313269687a4b82a7ba19871bded80290f3c98f

  • SSDEEP

    24576:sAEhJHs87s26KsOKFdA/JXUKi/oXzQub+Bft705gsXwD:sAnvOcGX6gNaP705g

Malware Config

Targets

    • Target

      f8ffc252796874ef35f1da7be7a7eb081905f81863cda673513aa422fde9b8d7

    • Size

      1.9MB

    • MD5

      d2a9d9e182178473cbd9f1e018f93efa

    • SHA1

      625b249b94945eb2dda93139831f9197999b1391

    • SHA256

      f8ffc252796874ef35f1da7be7a7eb081905f81863cda673513aa422fde9b8d7

    • SHA512

      f79f0b5ca4d861461c777edc0e9e599f04baa6c237f4146be11507827e830a6258f3549b0449069d057bcd0ffc313269687a4b82a7ba19871bded80290f3c98f

    • SSDEEP

      24576:sAEhJHs87s26KsOKFdA/JXUKi/oXzQub+Bft705gsXwD:sAnvOcGX6gNaP705g

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks