Overview

overview

10

Static

static

3

b90dd1a5a3...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b90dd1a5a3d01929e66c49052a366b547bb67702ea702b831fe9e99a20f67828

  • Size

    480KB

  • Sample

    241111-a8my2ayhmh

  • MD5

    5aebcd05bcb121c12f4eb51d243c53c7

  • SHA1

    f7388b9f70c0786e5e96b8614dc59323f9f6e859

  • SHA256

    b90dd1a5a3d01929e66c49052a366b547bb67702ea702b831fe9e99a20f67828

  • SHA512

    469461a1d282eba1d763d46a46b9280eeab46914455e4588e8c810313bcc02910b9204f3adfedf3e50e69e77a53d3fb435ca7e655118f28370ccd87cf90e21f7

  • SSDEEP

    12288:6MrSy90sKcQ52uqy1MYVs7yj7Log2mvDL75:MywcXuPOYpj7LD/75

Score
10/10
redlinediscoveryinfostealerpersistence

Malware Config

Targets

    • Target

      b90dd1a5a3d01929e66c49052a366b547bb67702ea702b831fe9e99a20f67828

    • Size

      480KB

    • MD5

      5aebcd05bcb121c12f4eb51d243c53c7

    • SHA1

      f7388b9f70c0786e5e96b8614dc59323f9f6e859

    • SHA256

      b90dd1a5a3d01929e66c49052a366b547bb67702ea702b831fe9e99a20f67828

    • SHA512

      469461a1d282eba1d763d46a46b9280eeab46914455e4588e8c810313bcc02910b9204f3adfedf3e50e69e77a53d3fb435ca7e655118f28370ccd87cf90e21f7

    • SSDEEP

      12288:6MrSy90sKcQ52uqy1MYVs7yj7Log2mvDL75:MywcXuPOYpj7LD/75

    Score
    10/10
    redlinediscoveryinfostealerpersistence

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks