Overview

overview

10

Static

static

10

wp64.exe

windows7-x64

10

wp64.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    wp64.exe

  • Size

    2.3MB

  • Sample

    240113-hgjrasdgem

  • MD5

    1e6f8ef7e26df09a648103de4bae4576

  • SHA1

    541b00e96c9ea5082a86dc70fd782267b3500855

  • SHA256

    cac992f0ead92e6195da30bb6952c5642ca91f5ffd839beffa9a655caf2165e2

  • SHA512

    17189a930f0f544847f8f37fda73519d9489cbfecfbfb5d2ff40cbfaf93791b5ff6437917da17f1da6daf986318e65c9ccd1aedc542f3afbdac7501c80dc13ce

  • SSDEEP

    24576:DcjmcTjtzOkZ/YAhL8vx/KPqti36hBKNKkThXHf5gxLzQ:UmcFHtY4L8vk+xQ4kBHf5gB

Score
10/10
redlinediscoveryevasioninfostealerspywarestealertrojan

Malware Config

Targets

    • Target

      wp64.exe

    • Size

      2.3MB

    • MD5

      1e6f8ef7e26df09a648103de4bae4576

    • SHA1

      541b00e96c9ea5082a86dc70fd782267b3500855

    • SHA256

      cac992f0ead92e6195da30bb6952c5642ca91f5ffd839beffa9a655caf2165e2

    • SHA512

      17189a930f0f544847f8f37fda73519d9489cbfecfbfb5d2ff40cbfaf93791b5ff6437917da17f1da6daf986318e65c9ccd1aedc542f3afbdac7501c80dc13ce

    • SSDEEP

      24576:DcjmcTjtzOkZ/YAhL8vx/KPqti36hBKNKkThXHf5gxLzQ:UmcFHtY4L8vk+xQ4kBHf5gB

    Score
    10/10
    redlinediscoveryevasioninfostealerspywarestealertrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks