Overview

overview

10

Static

static

3

b0aa21cba7...75.exe

windows7-x64

10

b0aa21cba7...75.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0aa21cba7e2469b90c60df9e8763b58dd4f359ffb4d7319dd9c65dc1ce0ac75.bin

  • Size

    696KB

  • Sample

    230505-xqbjlsfg58

  • MD5

    46c5d415ae900547c67e46d2c5b10e99

  • SHA1

    4265c640004d22544e23733190a47f20c424af64

  • SHA256

    b0aa21cba7e2469b90c60df9e8763b58dd4f359ffb4d7319dd9c65dc1ce0ac75

  • SHA512

    329fff8777f25c0cf604b80859f93afa1ba2deb422cb7d8f3df1a8ba3c6c6ec9fb7978f1f0d5dc85720d4e26e7e0e53a2f04901cbaac7363b140e6164ec2014d

  • SSDEEP

    12288:y/y90HghzsWWrh0ArHiRKksjQFxr8UFdMM9e6Z52PBb0c/:gyNhwWWrZ4KoFxYUFHougPBYc/

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      b0aa21cba7e2469b90c60df9e8763b58dd4f359ffb4d7319dd9c65dc1ce0ac75.bin

    • Size

      696KB

    • MD5

      46c5d415ae900547c67e46d2c5b10e99

    • SHA1

      4265c640004d22544e23733190a47f20c424af64

    • SHA256

      b0aa21cba7e2469b90c60df9e8763b58dd4f359ffb4d7319dd9c65dc1ce0ac75

    • SHA512

      329fff8777f25c0cf604b80859f93afa1ba2deb422cb7d8f3df1a8ba3c6c6ec9fb7978f1f0d5dc85720d4e26e7e0e53a2f04901cbaac7363b140e6164ec2014d

    • SSDEEP

      12288:y/y90HghzsWWrh0ArHiRKksjQFxr8UFdMM9e6Z52PBb0c/:gyNhwWWrZ4KoFxYUFHougPBYc/

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks