General

  • Target

    6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729.exe

  • Size

    433KB

  • Sample

    240707-bjsnnazaln

  • MD5

    286954cfb226c9f6a2e509b169d7bb2e

  • SHA1

    afec3786d481b68a560cd58b47a0dd3728b02f8c

  • SHA256

    6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729

  • SHA512

    1c91a45f2c69f7a024d3406eb761cc5d4ddebdba008e0d007a34b90d60fcfa6c193563b1bcca192828a4981eff9cf289dc76b6978654c4360f35b80184399736

  • SSDEEP

    6144:NWtMKz49H6zgtfT7tpE3gq46DZ/mkmEq4RRbZGky847ecW:83z4gAnE3FPNUObkky17ec

Malware Config

Targets

    • Target

      6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729.exe

    • Size

      433KB

    • MD5

      286954cfb226c9f6a2e509b169d7bb2e

    • SHA1

      afec3786d481b68a560cd58b47a0dd3728b02f8c

    • SHA256

      6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729

    • SHA512

      1c91a45f2c69f7a024d3406eb761cc5d4ddebdba008e0d007a34b90d60fcfa6c193563b1bcca192828a4981eff9cf289dc76b6978654c4360f35b80184399736

    • SSDEEP

      6144:NWtMKz49H6zgtfT7tpE3gq46DZ/mkmEq4RRbZGky847ecW:83z4gAnE3FPNUObkky17ec

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks