Overview

overview

10

Static

static

3

dee3ff9324...33.exe

windows7-x64

10

dee3ff9324...33.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dee3ff932456ceea743e52df91bad5c2f6171f2c8c27c9b83e718fa4eeffd733.bin

  • Size

    697KB

  • Sample

    230501-xe9l9sff5v

  • MD5

    8fb1d874c6af69f9a563592847334934

  • SHA1

    f7bb188241c0808bc16d264c667da4449d281b0d

  • SHA256

    dee3ff932456ceea743e52df91bad5c2f6171f2c8c27c9b83e718fa4eeffd733

  • SHA512

    65fd4774832d6e50ab95514e7de439102da3c5adb6ff66e5c29de16e37e27bfcb4e365d381b34b1730fe6c75fea577ecc39e167e025d35be743bc1dc4709869b

  • SSDEEP

    12288:gy90Qvr/Ui+UH4NVw5iOAD1kCD+Ar9/kSTQYvOmX26CAn4s:gy1Yf7NVcCRj+ArlkmvxFP4s

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      dee3ff932456ceea743e52df91bad5c2f6171f2c8c27c9b83e718fa4eeffd733.bin

    • Size

      697KB

    • MD5

      8fb1d874c6af69f9a563592847334934

    • SHA1

      f7bb188241c0808bc16d264c667da4449d281b0d

    • SHA256

      dee3ff932456ceea743e52df91bad5c2f6171f2c8c27c9b83e718fa4eeffd733

    • SHA512

      65fd4774832d6e50ab95514e7de439102da3c5adb6ff66e5c29de16e37e27bfcb4e365d381b34b1730fe6c75fea577ecc39e167e025d35be743bc1dc4709869b

    • SSDEEP

      12288:gy90Qvr/Ui+UH4NVw5iOAD1kCD+Ar9/kSTQYvOmX26CAn4s:gy1Yf7NVcCRj+ArlkmvxFP4s

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks