General

  • Target

    denuvo(1).exe

  • Size

    3.9MB

  • Sample

    250110-3q298atlaw

  • MD5

    21e4d229e67971abede49de4d1c501d6

  • SHA1

    9b688958f1a1932f34ce24abe8aa1355bf510cea

  • SHA256

    0faf491ddc77fd6e2d323f612dd9512c2525ad617bcd2a887e89c494f9f7858e

  • SHA512

    137821dd623ee1dba6de230af441ce099ad30ef532f9e64b9c59667f6792146b6963433304cc6321a909fa9ce2abcdef76bd81fc07507f16e85a76a362eb9848

  • SSDEEP

    98304:nYJDiZpn+8vcAA2rX/Hg3zVK6xg+17q7pN2cPxv:mircaviY6K+17GNL

Malware Config

Targets

    • Target

      denuvo(1).exe

    • Size

      3.9MB

    • MD5

      21e4d229e67971abede49de4d1c501d6

    • SHA1

      9b688958f1a1932f34ce24abe8aa1355bf510cea

    • SHA256

      0faf491ddc77fd6e2d323f612dd9512c2525ad617bcd2a887e89c494f9f7858e

    • SHA512

      137821dd623ee1dba6de230af441ce099ad30ef532f9e64b9c59667f6792146b6963433304cc6321a909fa9ce2abcdef76bd81fc07507f16e85a76a362eb9848

    • SSDEEP

      98304:nYJDiZpn+8vcAA2rX/Hg3zVK6xg+17q7pN2cPxv:mircaviY6K+17GNL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks