Overview

overview

10

Static

static

3

38750b38cb...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38750b38cb8000ed7acd013315a8f28bb0e1d26747dad278577c4c1b005da728

  • Size

    479KB

  • Sample

    241110-1pz3csyqar

  • MD5

    80f8dd0141700ce4460ce0fd9a2f7869

  • SHA1

    59470d2dc7fdc4f9c160a8ce0527e33494a48213

  • SHA256

    38750b38cb8000ed7acd013315a8f28bb0e1d26747dad278577c4c1b005da728

  • SHA512

    caf62dccac956fc75478f6d42caa29435bc2f1b9a88cb83d7dfc9db1fb103bcd4a12949a3b707d518f3ae010ade2f929c43ba7058ffbb0e2ca16aa3fbb83c363

  • SSDEEP

    12288:cMr0y90qK10Q4UWFuTutEwdip99W/iYY:Yy9K10QAI/fH9WW

Score
10/10
redlinediscoveryinfostealerpersistence

Malware Config

Targets

    • Target

      38750b38cb8000ed7acd013315a8f28bb0e1d26747dad278577c4c1b005da728

    • Size

      479KB

    • MD5

      80f8dd0141700ce4460ce0fd9a2f7869

    • SHA1

      59470d2dc7fdc4f9c160a8ce0527e33494a48213

    • SHA256

      38750b38cb8000ed7acd013315a8f28bb0e1d26747dad278577c4c1b005da728

    • SHA512

      caf62dccac956fc75478f6d42caa29435bc2f1b9a88cb83d7dfc9db1fb103bcd4a12949a3b707d518f3ae010ade2f929c43ba7058ffbb0e2ca16aa3fbb83c363

    • SSDEEP

      12288:cMr0y90qK10Q4UWFuTutEwdip99W/iYY:Yy9K10QAI/fH9WW

    Score
    10/10
    redlinediscoveryinfostealerpersistence

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks