Overview

overview

10

Static

static

3

20e3f38d27...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20e3f38d2703e2c92d6bd9fcabddf7e07c2b1b1cd2986226c0a25ed0e6cc31ff

  • Size

    376KB

  • Sample

    241111-ckkvwa1akd

  • MD5

    e399600c944c2e437a01545b1706e335

  • SHA1

    0c1d2b905db8d3b54ad7b28c8285f6469b81b9d9

  • SHA256

    20e3f38d2703e2c92d6bd9fcabddf7e07c2b1b1cd2986226c0a25ed0e6cc31ff

  • SHA512

    3cd76ab1121c464554975a1db188f9232291f2cf778ad5414b58b43196d2cdac5409f5143e71e1bac3b8bad7e80e7534b45ee7dcf25bb48da4565707ebfc6622

  • SSDEEP

    6144:KLy+bnr+wp0yN90QE+ZC4bQ/tnv4WahcUdfCz5kla7KSUwcML9YreX5vAb:ZMrgy90MZCIQpCqma7nd1L9Qe1Ab

Score
10/10
redlinediscoveryinfostealerpersistence

Malware Config

Targets

    • Target

      20e3f38d2703e2c92d6bd9fcabddf7e07c2b1b1cd2986226c0a25ed0e6cc31ff

    • Size

      376KB

    • MD5

      e399600c944c2e437a01545b1706e335

    • SHA1

      0c1d2b905db8d3b54ad7b28c8285f6469b81b9d9

    • SHA256

      20e3f38d2703e2c92d6bd9fcabddf7e07c2b1b1cd2986226c0a25ed0e6cc31ff

    • SHA512

      3cd76ab1121c464554975a1db188f9232291f2cf778ad5414b58b43196d2cdac5409f5143e71e1bac3b8bad7e80e7534b45ee7dcf25bb48da4565707ebfc6622

    • SSDEEP

      6144:KLy+bnr+wp0yN90QE+ZC4bQ/tnv4WahcUdfCz5kla7KSUwcML9YreX5vAb:ZMrgy90MZCIQpCqma7nd1L9Qe1Ab

    Score
    10/10
    redlinediscoveryinfostealerpersistence

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks