Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34c1b8d7e8431854989230c9a65c6b2fd80e74958e893c7eeafd41dcd7796cfd

  • Size

    398KB

  • Sample

    231115-lfl2tafe74

  • MD5

    461b8083838b2d837b19466b5acce0e4

  • SHA1

    a88e1d0174d481c858bf2426d5dbaa7eeca7981c

  • SHA256

    34c1b8d7e8431854989230c9a65c6b2fd80e74958e893c7eeafd41dcd7796cfd

  • SHA512

    5fb86c07fd8bb855327ba40201eb49a6e1aed4e2f164dae1ac0bff0d370f53702a41b47b4f6a9a6198a65ad12960cc9b9b67fafb3ef742c8a438f0568c9712e2

  • SSDEEP

    6144:6i3foYiGdwemgItByRT0/dolaDA0ShlsZUIb37ScD4Akr7rwaM:6woU4DSEZU+3tcA+

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      34c1b8d7e8431854989230c9a65c6b2fd80e74958e893c7eeafd41dcd7796cfd

    • Size

      398KB

    • MD5

      461b8083838b2d837b19466b5acce0e4

    • SHA1

      a88e1d0174d481c858bf2426d5dbaa7eeca7981c

    • SHA256

      34c1b8d7e8431854989230c9a65c6b2fd80e74958e893c7eeafd41dcd7796cfd

    • SHA512

      5fb86c07fd8bb855327ba40201eb49a6e1aed4e2f164dae1ac0bff0d370f53702a41b47b4f6a9a6198a65ad12960cc9b9b67fafb3ef742c8a438f0568c9712e2

    • SSDEEP

      6144:6i3foYiGdwemgItByRT0/dolaDA0ShlsZUIb37ScD4Akr7rwaM:6woU4DSEZU+3tcA+

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks