General

  • Target

    286954cfb226c9f6a2e509b169d7bb2e.bin

  • Size

    225KB

  • Sample

    240708-cxdbkayalp

  • MD5

    5ba44d21bd03f42a2d407b15d6cd41d2

  • SHA1

    f394f2dd98cb5f1c4921517a22dea5ed0c48e18c

  • SHA256

    bf5f81da33886e5eac772dd3fedad6a8e1f929a9489d8f3e95145747518f77ee

  • SHA512

    0d801a15150695a7eb624510b7531fa6ed0e59648e70c42d1bb5acc8bf52553b357c6c27c3f86133c462428d9bfa2ae68863ee533cf4229e4317c648c30b255c

  • SSDEEP

    3072:NBw7E9tZWABkkMU9+Bf0NXcpQ0htnMnWzvVNQTKUgSR9HDm9PPWeee5oc+bh8gmh:l9tZjBkqGfoIDcQNNQTRLpqyJtEFt

Malware Config

Targets

    • Target

      6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729.exe

    • Size

      433KB

    • MD5

      286954cfb226c9f6a2e509b169d7bb2e

    • SHA1

      afec3786d481b68a560cd58b47a0dd3728b02f8c

    • SHA256

      6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729

    • SHA512

      1c91a45f2c69f7a024d3406eb761cc5d4ddebdba008e0d007a34b90d60fcfa6c193563b1bcca192828a4981eff9cf289dc76b6978654c4360f35b80184399736

    • SSDEEP

      6144:NWtMKz49H6zgtfT7tpE3gq46DZ/mkmEq4RRbZGky847ecW:83z4gAnE3FPNUObkky17ec

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks