Overview

overview

10

Static

static

3

6266464b35...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6266464b35b7c259b2fcb109cf50e9f9fd28ceca83c056b8cddbfbcd6e9ca794

  • Size

    376KB

  • Sample

    241111-cxkqmstnfr

  • MD5

    581fc2c68d8e938889cdfe8ffe615ab1

  • SHA1

    19f95db7d6de559f93aff8a5789ab86761b844fa

  • SHA256

    6266464b35b7c259b2fcb109cf50e9f9fd28ceca83c056b8cddbfbcd6e9ca794

  • SHA512

    630d00d32605c65fe0d81f14ebb44a9deae5cbc786a60f6b8c3805aea5dc2a01710d43707eb0c84fafe6161870281b5e11053bd231ec0ece28ce767a8c374370

  • SSDEEP

    6144:Kcy+bnr+Cp0yN90QEd6ZKmzpE6MIjeWEmZlTemGdyrSs+fD6wvfAzZDamybj1Jqv:oMr2y90fKKAmClTriy3oDLqXyNMv

Score
10/10
redlinediscoveryinfostealerpersistence

Malware Config

Targets

    • Target

      6266464b35b7c259b2fcb109cf50e9f9fd28ceca83c056b8cddbfbcd6e9ca794

    • Size

      376KB

    • MD5

      581fc2c68d8e938889cdfe8ffe615ab1

    • SHA1

      19f95db7d6de559f93aff8a5789ab86761b844fa

    • SHA256

      6266464b35b7c259b2fcb109cf50e9f9fd28ceca83c056b8cddbfbcd6e9ca794

    • SHA512

      630d00d32605c65fe0d81f14ebb44a9deae5cbc786a60f6b8c3805aea5dc2a01710d43707eb0c84fafe6161870281b5e11053bd231ec0ece28ce767a8c374370

    • SSDEEP

      6144:Kcy+bnr+Cp0yN90QEd6ZKmzpE6MIjeWEmZlTemGdyrSs+fD6wvfAzZDamybj1Jqv:oMr2y90fKKAmClTriy3oDLqXyNMv

    Score
    10/10
    redlinediscoveryinfostealerpersistence

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks