Overview

overview

10

Static

static

3

509a39de8d...1f.exe

windows7-x64

10

509a39de8d...1f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    509a39de8dd0df8505414287bbe8834dfe4d6edb546f1590f482bbe3a678031f

  • Size

    1.6MB

  • Sample

    241122-2ca35sxjfj

  • MD5

    0cb43fb3f55168e39845d89ec8718dee

  • SHA1

    d259155148e9fa21254ddca9c1d1dfd0dd3d696b

  • SHA256

    509a39de8dd0df8505414287bbe8834dfe4d6edb546f1590f482bbe3a678031f

  • SHA512

    be57dc7a29e47fe593f24316670322e4d298f013a570b25bb5765a2d2179de140f0aea33b1766caf180d03bb40de8f4d5b8e4d502d9b67916c15739ab06d67ea

  • SSDEEP

    24576:uk70Trcd5/a2IeRs/J5TY5kNyBo4kx929bL3Hnx:ukQTAd5/NhRAJ+fB+kn3Hnx

Score
10/10
redlinediscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      509a39de8dd0df8505414287bbe8834dfe4d6edb546f1590f482bbe3a678031f

    • Size

      1.6MB

    • MD5

      0cb43fb3f55168e39845d89ec8718dee

    • SHA1

      d259155148e9fa21254ddca9c1d1dfd0dd3d696b

    • SHA256

      509a39de8dd0df8505414287bbe8834dfe4d6edb546f1590f482bbe3a678031f

    • SHA512

      be57dc7a29e47fe593f24316670322e4d298f013a570b25bb5765a2d2179de140f0aea33b1766caf180d03bb40de8f4d5b8e4d502d9b67916c15739ab06d67ea

    • SSDEEP

      24576:uk70Trcd5/a2IeRs/J5TY5kNyBo4kx929bL3Hnx:ukQTAd5/NhRAJ+fB+kn3Hnx

    Score
    10/10
    redlinediscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks