Overview

overview

10

Static

static

10

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    166c5c49e45274ca97fad2f201aa5b6c0b519ec5d6dc1ae5aec1d8f79a8319b1

  • Size

    305KB

  • Sample

    240424-qk5f6sae86

  • MD5

    e370faa969e66712b31e72c1bdb9fa0e

  • SHA1

    de10e01d91b07d316a9b13e2a8dfd4f37e8cde2b

  • SHA256

    166c5c49e45274ca97fad2f201aa5b6c0b519ec5d6dc1ae5aec1d8f79a8319b1

  • SHA512

    75aa838a8e3258a3fb4be1ec8315cfa1aa24f991282aa6a0cfd69f6a4b404c8848997c3421c8c2f797e7796e69b4ba76809b0ea0e081962fcad32b280a1983a4

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10
redlinespoodiscoveryinfostealerspywarestealer

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Targets

    • Target

      166c5c49e45274ca97fad2f201aa5b6c0b519ec5d6dc1ae5aec1d8f79a8319b1

    • Size

      305KB

    • MD5

      e370faa969e66712b31e72c1bdb9fa0e

    • SHA1

      de10e01d91b07d316a9b13e2a8dfd4f37e8cde2b

    • SHA256

      166c5c49e45274ca97fad2f201aa5b6c0b519ec5d6dc1ae5aec1d8f79a8319b1

    • SHA512

      75aa838a8e3258a3fb4be1ec8315cfa1aa24f991282aa6a0cfd69f6a4b404c8848997c3421c8c2f797e7796e69b4ba76809b0ea0e081962fcad32b280a1983a4

    • SSDEEP

      6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

    Score
    10/10
    redlinespoodiscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks