Overview

overview

10

Static

static

3

d14b0efb62...83.exe

windows7-x64

10

d14b0efb62...83.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d14b0efb62d14fcc4c6f455e67b679975ae159cae3b7b01ed094545e46381483.bin

  • Size

    651KB

  • Sample

    230501-w7x89sdb44

  • MD5

    e0536e89cb62df69d9295cdde5d46f37

  • SHA1

    4ff75f985ac3bda1e4ced4edf80cc3bd81a431dd

  • SHA256

    d14b0efb62d14fcc4c6f455e67b679975ae159cae3b7b01ed094545e46381483

  • SHA512

    e1f58af061a96ebbda9a7e7cdb3d1e97bdf212bf0b7ab3930107a9c43c35ddb67d170a9edc051570ee879bd4d7f9850f26d5187e3d5d45def79ee20e0dcb7673

  • SSDEEP

    12288:4y90QJuFENgKy+RE8z8PPXhDujHgmF8QW/v0tV52gmQjxONny+N:4yPJwEzyDrPfhj14/2g5ENny+N

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      d14b0efb62d14fcc4c6f455e67b679975ae159cae3b7b01ed094545e46381483.bin

    • Size

      651KB

    • MD5

      e0536e89cb62df69d9295cdde5d46f37

    • SHA1

      4ff75f985ac3bda1e4ced4edf80cc3bd81a431dd

    • SHA256

      d14b0efb62d14fcc4c6f455e67b679975ae159cae3b7b01ed094545e46381483

    • SHA512

      e1f58af061a96ebbda9a7e7cdb3d1e97bdf212bf0b7ab3930107a9c43c35ddb67d170a9edc051570ee879bd4d7f9850f26d5187e3d5d45def79ee20e0dcb7673

    • SSDEEP

      12288:4y90QJuFENgKy+RE8z8PPXhDujHgmF8QW/v0tV52gmQjxONny+N:4yPJwEzyDrPfhj14/2g5ENny+N

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks