Overview

overview

10

Static

static

1

Installer 2.0.exe

windows7-x64

10

Installer 2.0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Installer 2.0.exe

  • Size

    2.3MB

  • Sample

    240312-af667scd87

  • MD5

    7baf02b39f87f483ffd737cec5fc91e8

  • SHA1

    66621e3867db9be23f322bc7aeb1097c47965f4e

  • SHA256

    ec7f6cf5d47cb1578853042ed46754cf7e3fa13a4fedb5a703a131a32fe54e10

  • SHA512

    04ea069a48d3825b010df767be7df460229016cd0251e2307316be99c81b2a78874087e15e32357671afa37d1b21bfa82d0ae143f67e60fd920e81c9b415de7b

  • SSDEEP

    49152:xip7mQrz26qWGngi3JqNIr4inzPxN9Bnc9lLhomuTwPwLpCYvVlg6eDw:kp75VqWGngi3JqNIkizPxN9Bnc9lLhox

Score
10/10
redlinezgratdiscoveryinfostealerratspywarestealer

Malware Config

Targets

    • Target

      Installer 2.0.exe

    • Size

      2.3MB

    • MD5

      7baf02b39f87f483ffd737cec5fc91e8

    • SHA1

      66621e3867db9be23f322bc7aeb1097c47965f4e

    • SHA256

      ec7f6cf5d47cb1578853042ed46754cf7e3fa13a4fedb5a703a131a32fe54e10

    • SHA512

      04ea069a48d3825b010df767be7df460229016cd0251e2307316be99c81b2a78874087e15e32357671afa37d1b21bfa82d0ae143f67e60fd920e81c9b415de7b

    • SSDEEP

      49152:xip7mQrz26qWGngi3JqNIr4inzPxN9Bnc9lLhomuTwPwLpCYvVlg6eDw:kp75VqWGngi3JqNIkizPxN9Bnc9lLhox

    Score
    10/10
    redlinezgratdiscoveryinfostealerratspywarestealer

    • Detect ZGRat V1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks