Overview

overview

10

Static

static

3

7e4d553a0d...75.exe

windows7-x64

10

7e4d553a0d...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e4d553a0d48c82c4d0dca1a58ae34f86d5683200c174b39d9b1f56ccb050075.exe

  • Size

    339KB

  • Sample

    240523-djxzgsbg44

  • MD5

    46102e5be024379e54fa1b988aa54582

  • SHA1

    e1475f61eacde61979c7e8b0203b5a0ac6b14dfe

  • SHA256

    7e4d553a0d48c82c4d0dca1a58ae34f86d5683200c174b39d9b1f56ccb050075

  • SHA512

    7e4ee549c56cc473f296a45e68a7519f827c503cffc59612d19d67858c42618ca8f0a74c02db2ab0ce78c9e6075c4ca33096dd976febea3f994e92c42f5f6576

  • SSDEEP

    6144:I5zGmvtRypYPkT/lGc7bJo8L+HIXnXmeQV9CSug:0GsAphtbJIHI3yASug

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      7e4d553a0d48c82c4d0dca1a58ae34f86d5683200c174b39d9b1f56ccb050075.exe

    • Size

      339KB

    • MD5

      46102e5be024379e54fa1b988aa54582

    • SHA1

      e1475f61eacde61979c7e8b0203b5a0ac6b14dfe

    • SHA256

      7e4d553a0d48c82c4d0dca1a58ae34f86d5683200c174b39d9b1f56ccb050075

    • SHA512

      7e4ee549c56cc473f296a45e68a7519f827c503cffc59612d19d67858c42618ca8f0a74c02db2ab0ce78c9e6075c4ca33096dd976febea3f994e92c42f5f6576

    • SSDEEP

      6144:I5zGmvtRypYPkT/lGc7bJo8L+HIXnXmeQV9CSug:0GsAphtbJIHI3yASug

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks