Overview

overview

10

Static

static

3

cdab24cdef...00.exe

windows7-x64

10

cdab24cdef...00.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cdab24cdefae63170e6ca323b385e27061a585ead745f71315a28d3714f2da00.bin

  • Size

    690KB

  • Sample

    230501-w354baee5x

  • MD5

    557f819502b3be97dfc9a4d9d832491d

  • SHA1

    dbf195fd37c35b9ee65f05e402ea52b1fbd7fd93

  • SHA256

    cdab24cdefae63170e6ca323b385e27061a585ead745f71315a28d3714f2da00

  • SHA512

    ecece8817adfbf5f40944008980d2cc0af5550599287be74a16641c4f39bf3c901564c4033dba12ac5b780150e0c80c2a079225551e876381790f447eeb42c3b

  • SSDEEP

    12288:by90JlRlxUgWsXdnmBwu0WUFSPzeCiRMCMI0g9m2KmkyiK6Cql:by6QnqmD0uoMCJE2KRO6Rl

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      cdab24cdefae63170e6ca323b385e27061a585ead745f71315a28d3714f2da00.bin

    • Size

      690KB

    • MD5

      557f819502b3be97dfc9a4d9d832491d

    • SHA1

      dbf195fd37c35b9ee65f05e402ea52b1fbd7fd93

    • SHA256

      cdab24cdefae63170e6ca323b385e27061a585ead745f71315a28d3714f2da00

    • SHA512

      ecece8817adfbf5f40944008980d2cc0af5550599287be74a16641c4f39bf3c901564c4033dba12ac5b780150e0c80c2a079225551e876381790f447eeb42c3b

    • SSDEEP

      12288:by90JlRlxUgWsXdnmBwu0WUFSPzeCiRMCMI0g9m2KmkyiK6Cql:by6QnqmD0uoMCJE2KRO6Rl

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks