Overview

overview

10

Static

static

3

dafb5223ce...9c.exe

windows7-x64

10

dafb5223ce...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dafb5223ce4976c752500a24a99528cee3296ec3c115cb8655a5f9a920e0439c.bin

  • Size

    690KB

  • Sample

    230501-xctg9sdf76

  • MD5

    14e72fd2872d9eb4f5e6438c130f11e6

  • SHA1

    9fbc43ddb4ba6da8691893372a32afd2c9404bf7

  • SHA256

    dafb5223ce4976c752500a24a99528cee3296ec3c115cb8655a5f9a920e0439c

  • SHA512

    e5331439e0e37086e8f64d40bf8d7fd6e7ff54f67c7b9ab33e7e5a4b907b7bae5c4a6a69ca02d99cd00ba57d2da119aae8e3cc61b2485144cfb6026a5bcd891e

  • SSDEEP

    12288:vy90w5cFpttkwwD+btfBtkfRkmfq+rMa5nJ6YGBniNvmwGftIJHiGbG:vyJqFTtLwabtfBtGRfy+QcnYMNgM/bG

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      dafb5223ce4976c752500a24a99528cee3296ec3c115cb8655a5f9a920e0439c.bin

    • Size

      690KB

    • MD5

      14e72fd2872d9eb4f5e6438c130f11e6

    • SHA1

      9fbc43ddb4ba6da8691893372a32afd2c9404bf7

    • SHA256

      dafb5223ce4976c752500a24a99528cee3296ec3c115cb8655a5f9a920e0439c

    • SHA512

      e5331439e0e37086e8f64d40bf8d7fd6e7ff54f67c7b9ab33e7e5a4b907b7bae5c4a6a69ca02d99cd00ba57d2da119aae8e3cc61b2485144cfb6026a5bcd891e

    • SSDEEP

      12288:vy90w5cFpttkwwD+btfBtkfRkmfq+rMa5nJ6YGBniNvmwGftIJHiGbG:vyJqFTtLwabtfBtGRfy+QcnYMNgM/bG

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks