Overview

overview

10

Static

static

10

123.exe

windows7-x64

10

123.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    123.exe

  • Size

    667KB

  • Sample

    240722-w42ghs1ckb

  • MD5

    343d4defc4481746b24e7c2921c4f548

  • SHA1

    47616a15b6fecfdb7ba8a5a3d01277c1b148d530

  • SHA256

    e07aa8e347888a9fa3c9a21614e799a72c12f84507a1f567331edfed03e79d23

  • SHA512

    72aa1600efe604f85072b467acbb0cb7684874d3c7483147a72eb01968ef044030c7033d3fcc522c36bab4f7994703c57e0bb1811526c60a18c24a0d8012754b

  • SSDEEP

    6144:IHejFCzqQIfr3Q8kM30Wl2sFqtcwD0NRhf7i8jFfcasWh:IHejFIqQ6D6M30WllotcwSf7i8j5c7W

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      123.exe

    • Size

      667KB

    • MD5

      343d4defc4481746b24e7c2921c4f548

    • SHA1

      47616a15b6fecfdb7ba8a5a3d01277c1b148d530

    • SHA256

      e07aa8e347888a9fa3c9a21614e799a72c12f84507a1f567331edfed03e79d23

    • SHA512

      72aa1600efe604f85072b467acbb0cb7684874d3c7483147a72eb01968ef044030c7033d3fcc522c36bab4f7994703c57e0bb1811526c60a18c24a0d8012754b

    • SSDEEP

      6144:IHejFCzqQIfr3Q8kM30Wl2sFqtcwD0NRhf7i8jFfcasWh:IHejFIqQ6D6M30WllotcwSf7i8j5c7W

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks