Overview

overview

10

Static

static

3

d8fde6b34d...40.exe

windows7-x64

10

d8fde6b34d...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d8fde6b34d4f80d286fd18a55c76fa8f6d77a2f1a7ea5db20516c05b9ac9d740.bin

  • Size

    611KB

  • Sample

    230501-xbs54sfc5v

  • MD5

    81826def9bb434df324d03f2ad29014a

  • SHA1

    ae75f43541464ccfb93b6af58469ad52ea4493eb

  • SHA256

    d8fde6b34d4f80d286fd18a55c76fa8f6d77a2f1a7ea5db20516c05b9ac9d740

  • SHA512

    b695ffbdc642e13a9085be6a38572678b5ada35a76c1500786d963b544d9daa520b5a124f22b72c187af0ca28ef92fd1f0b34a8d6da7f9aa69ccc32523b69412

  • SSDEEP

    6144:qEp0yN90QEpuARU3lwgQlj3VnFr81YycmlY/+Swgzl87qR2Js8Pwk9mIin1PXHsn:Qy90mMBVFr81YyJpgzMqgSWoIiaq5Sv

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      d8fde6b34d4f80d286fd18a55c76fa8f6d77a2f1a7ea5db20516c05b9ac9d740.bin

    • Size

      611KB

    • MD5

      81826def9bb434df324d03f2ad29014a

    • SHA1

      ae75f43541464ccfb93b6af58469ad52ea4493eb

    • SHA256

      d8fde6b34d4f80d286fd18a55c76fa8f6d77a2f1a7ea5db20516c05b9ac9d740

    • SHA512

      b695ffbdc642e13a9085be6a38572678b5ada35a76c1500786d963b544d9daa520b5a124f22b72c187af0ca28ef92fd1f0b34a8d6da7f9aa69ccc32523b69412

    • SSDEEP

      6144:qEp0yN90QEpuARU3lwgQlj3VnFr81YycmlY/+Swgzl87qR2Js8Pwk9mIin1PXHsn:Qy90mMBVFr81YyJpgzMqgSWoIiaq5Sv

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks