Overview

overview

10

Static

static

3

c14476c4df...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c14476c4df0a933f2bbb77f5aeb4ba5add71bd5d8a3b89c9667e13c51512fec2

  • Size

    479KB

  • Sample

    241111-ccad6szdlm

  • MD5

    971c5976df03efc5b370db5079ab83c9

  • SHA1

    f1fbfcb80393330cffe51c35e1412206c9cd5643

  • SHA256

    c14476c4df0a933f2bbb77f5aeb4ba5add71bd5d8a3b89c9667e13c51512fec2

  • SHA512

    42dfd25b06c655c1face9630aacd72295ebdfb2a8404d34293fdc9d7a8227f8ccaf876ea5aabcbe996b8290a3407863c267f6d69da907fe94a31c9f2e27f4c4c

  • SSDEEP

    12288:8MrAy90kTGIDJdBH/mzZ77lij5ulQJFd5pS44MkRGmz:UynTGINdBOF77ly54QJ1palRvz

Score
10/10
redlinediscoveryinfostealerpersistence

Malware Config

Targets

    • Target

      c14476c4df0a933f2bbb77f5aeb4ba5add71bd5d8a3b89c9667e13c51512fec2

    • Size

      479KB

    • MD5

      971c5976df03efc5b370db5079ab83c9

    • SHA1

      f1fbfcb80393330cffe51c35e1412206c9cd5643

    • SHA256

      c14476c4df0a933f2bbb77f5aeb4ba5add71bd5d8a3b89c9667e13c51512fec2

    • SHA512

      42dfd25b06c655c1face9630aacd72295ebdfb2a8404d34293fdc9d7a8227f8ccaf876ea5aabcbe996b8290a3407863c267f6d69da907fe94a31c9f2e27f4c4c

    • SSDEEP

      12288:8MrAy90kTGIDJdBH/mzZ77lij5ulQJFd5pS44MkRGmz:UynTGINdBOF77ly54QJ1palRvz

    Score
    10/10
    redlinediscoveryinfostealerpersistence

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks