Overview

overview

10

Static

static

3

7c1dbbb9d8...ed.exe

windows7-x64

3

7c1dbbb9d8...ed.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7c1dbbb9d8ad8966d07a1aff6e5e47722b25f36ecc70e64bb844019eae7ab2ed.exe

  • Size

    462KB

  • Sample

    240604-bycwragf5w

  • MD5

    414e4a04f59f2b451e678600e24d4f03

  • SHA1

    04d83260a8cdf7689166a753765283f72c84c064

  • SHA256

    7c1dbbb9d8ad8966d07a1aff6e5e47722b25f36ecc70e64bb844019eae7ab2ed

  • SHA512

    fee4566868537b2f9f78c43d3fd705423683a349a81162b5164d358f45291a604ffb9645c5a92b806ff337d523edae0367b211500ac1ec932a1e77c148bb1fba

  • SSDEEP

    12288:sY5KPstTP9fMxKTGhApYvLx/J9ZMWfdqZwWMUC:RkPwTPRKjApYNJ9x0X

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      7c1dbbb9d8ad8966d07a1aff6e5e47722b25f36ecc70e64bb844019eae7ab2ed.exe

    • Size

      462KB

    • MD5

      414e4a04f59f2b451e678600e24d4f03

    • SHA1

      04d83260a8cdf7689166a753765283f72c84c064

    • SHA256

      7c1dbbb9d8ad8966d07a1aff6e5e47722b25f36ecc70e64bb844019eae7ab2ed

    • SHA512

      fee4566868537b2f9f78c43d3fd705423683a349a81162b5164d358f45291a604ffb9645c5a92b806ff337d523edae0367b211500ac1ec932a1e77c148bb1fba

    • SSDEEP

      12288:sY5KPstTP9fMxKTGhApYvLx/J9ZMWfdqZwWMUC:RkPwTPRKjApYNJ9x0X

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks