General

  • Target

    e1cf672f6bb955a21b742da64c3978241d639e9c2add415b63df73c52b4c1c8f.exe

  • Size

    726KB

  • Sample

    241209-dfkvratmcr

  • MD5

    58ed282c74825b5b77132329d2a06868

  • SHA1

    44e040cc9b0760d929a14e34ff2153fb17a51aa8

  • SHA256

    e1cf672f6bb955a21b742da64c3978241d639e9c2add415b63df73c52b4c1c8f

  • SHA512

    837aa4d7c25f904272372b1585c5934afc99aa1f1a208b288d4b85efce0e079b61dac96449c6dc2032cc9a76975b59a424dbd135e9474ee6930871e3566e058e

  • SSDEEP

    12288:xDKYDzqxpXBNt1BrivR0V4TBjgYxs1wl206gBawFV2ceSb0BQ/GfM/4QiAzojgJ0:xDKY3qxp1NDXw

Malware Config

Targets

    • Target

      e1cf672f6bb955a21b742da64c3978241d639e9c2add415b63df73c52b4c1c8f.exe

    • Size

      726KB

    • MD5

      58ed282c74825b5b77132329d2a06868

    • SHA1

      44e040cc9b0760d929a14e34ff2153fb17a51aa8

    • SHA256

      e1cf672f6bb955a21b742da64c3978241d639e9c2add415b63df73c52b4c1c8f

    • SHA512

      837aa4d7c25f904272372b1585c5934afc99aa1f1a208b288d4b85efce0e079b61dac96449c6dc2032cc9a76975b59a424dbd135e9474ee6930871e3566e058e

    • SSDEEP

      12288:xDKYDzqxpXBNt1BrivR0V4TBjgYxs1wl206gBawFV2ceSb0BQ/GfM/4QiAzojgJ0:xDKY3qxp1NDXw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks