Overview

overview

10

Static

static

3

49f526ce4c...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49f526ce4c641388635284dd6f302683a94f710e61bf2400bc447b4e499529d0

  • Size

    599KB

  • Sample

    241111-bjxbvaylct

  • MD5

    8636d6eee03563f5c4ae50840e22d0fa

  • SHA1

    f7dfa11e9cd9f42ec5a269a6d4e28278fa2bfd84

  • SHA256

    49f526ce4c641388635284dd6f302683a94f710e61bf2400bc447b4e499529d0

  • SHA512

    4009cdf485545c7f4dd614516e58681f7a46d93b2d214eff18e2f5f60faadf04650ed1d0480533d63176be9f1b275c7b108b0df946b33f208ad4c2b51a22647b

  • SSDEEP

    12288:dMrey90NYYsHkEd6SooERFxgu3PyLxCYYdngBjbZiLfK0:/ySHGZUS6iu3PgMdgBJiL1

Score
10/10
redlinediscoveryinfostealerpersistence

Malware Config

Targets

    • Target

      49f526ce4c641388635284dd6f302683a94f710e61bf2400bc447b4e499529d0

    • Size

      599KB

    • MD5

      8636d6eee03563f5c4ae50840e22d0fa

    • SHA1

      f7dfa11e9cd9f42ec5a269a6d4e28278fa2bfd84

    • SHA256

      49f526ce4c641388635284dd6f302683a94f710e61bf2400bc447b4e499529d0

    • SHA512

      4009cdf485545c7f4dd614516e58681f7a46d93b2d214eff18e2f5f60faadf04650ed1d0480533d63176be9f1b275c7b108b0df946b33f208ad4c2b51a22647b

    • SSDEEP

      12288:dMrey90NYYsHkEd6SooERFxgu3PyLxCYYdngBjbZiLfK0:/ySHGZUS6iu3PgMdgBJiL1

    Score
    10/10
    redlinediscoveryinfostealerpersistence

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks