Overview

overview

10

Static

static

3

dbb3d7c025...ee.exe

windows7-x64

10

dbb3d7c025...ee.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dbb3d7c0252f05e29743efa8cf1eeef6285e1c7c49f43ed65cff3f31a04d5cee.bin

  • Size

    746KB

  • Sample

    230501-xde19sdg25

  • MD5

    d9f72b862703da3ce5253cbaf4c41872

  • SHA1

    57a97aa45b68790402d75abf01c30061cb3aba41

  • SHA256

    dbb3d7c0252f05e29743efa8cf1eeef6285e1c7c49f43ed65cff3f31a04d5cee

  • SHA512

    f1ec7676a4ccf036aff5eaed0dd8feb98a41d00c6ae7530160e50d2cdec649556eba180a62b232110276796266ecbfbad9b80b1b26220c67e67bcc322b5a1506

  • SSDEEP

    12288:My90+Xnxf2oa6nkVfjrS6LzMNUBO3PnGRS6Vlz4RNPdIrndzm8Ycl1Jde:MyDXhe6nkVvSwaUM3PGQGmNPdIrnto6s

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      dbb3d7c0252f05e29743efa8cf1eeef6285e1c7c49f43ed65cff3f31a04d5cee.bin

    • Size

      746KB

    • MD5

      d9f72b862703da3ce5253cbaf4c41872

    • SHA1

      57a97aa45b68790402d75abf01c30061cb3aba41

    • SHA256

      dbb3d7c0252f05e29743efa8cf1eeef6285e1c7c49f43ed65cff3f31a04d5cee

    • SHA512

      f1ec7676a4ccf036aff5eaed0dd8feb98a41d00c6ae7530160e50d2cdec649556eba180a62b232110276796266ecbfbad9b80b1b26220c67e67bcc322b5a1506

    • SSDEEP

      12288:My90+Xnxf2oa6nkVfjrS6LzMNUBO3PnGRS6Vlz4RNPdIrndzm8Ycl1Jde:MyDXhe6nkVvSwaUM3PGQGmNPdIrnto6s

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks