Overview

overview

10

Static

static

1

b3ec88ea38...a7.exe

windows7-x64

10

b3ec88ea38...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3ec88ea38ff4aaf679e7d97953aeea7.exe

  • Size

    457KB

  • Sample

    230919-xr3pgsde65

  • MD5

    b3ec88ea38ff4aaf679e7d97953aeea7

  • SHA1

    029cc0502f6e823b4bc6ff0b0ec61d372613a44f

  • SHA256

    ac02109344b6c76f350fdc0edf69eadc14583fe9c2d7312772451d28dcfe1c95

  • SHA512

    f399e0f04501d967ad9c9ce8ef86553ab4d0b51ab3332fef064b0f1d27f00e44c9a8a8dabe3d9ebe4431b84e802d36545cfdfebe7e60962fd1401d72510af30f

  • SSDEEP

    12288:CeZniLUR5jsXOcZGNrbzcCXy15hC3wnFvt/HjDcBtlMlqQEXE2:uLUR5jsX3ZorbzcCXy15hC3wnFvt/Hju

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      b3ec88ea38ff4aaf679e7d97953aeea7.exe

    • Size

      457KB

    • MD5

      b3ec88ea38ff4aaf679e7d97953aeea7

    • SHA1

      029cc0502f6e823b4bc6ff0b0ec61d372613a44f

    • SHA256

      ac02109344b6c76f350fdc0edf69eadc14583fe9c2d7312772451d28dcfe1c95

    • SHA512

      f399e0f04501d967ad9c9ce8ef86553ab4d0b51ab3332fef064b0f1d27f00e44c9a8a8dabe3d9ebe4431b84e802d36545cfdfebe7e60962fd1401d72510af30f

    • SSDEEP

      12288:CeZniLUR5jsXOcZGNrbzcCXy15hC3wnFvt/HjDcBtlMlqQEXE2:uLUR5jsX3ZorbzcCXy15hC3wnFvt/Hju

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks