Overview

overview

10

Static

static

3

f1389a2262...e0.exe

windows7-x64

10

f1389a2262...e0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1389a226231e404dd21ecf4aec843b65bbf93cd5f738e1a66ec9cf467df4de0.bin

  • Size

    1.2MB

  • Sample

    230505-y8awgafa9y

  • MD5

    f105d966f93bf7d43e2918b609bfe3c0

  • SHA1

    8a39447ec4056aa7789d3dc2407113e9c3effa9a

  • SHA256

    f1389a226231e404dd21ecf4aec843b65bbf93cd5f738e1a66ec9cf467df4de0

  • SHA512

    0ce036e02eedad57cb7a1da94def14e32125ff705b4180d4dad90579328fafccaa7a96ef636ab383fbd4c56dad1c8a56b1e206e7fef73d70c20db7a7514ba676

  • SSDEEP

    24576:BVQCVvyI/k4Zf9YMGp77zdd0ZKUNk9e0KUDsM1dpkJNK35m:BVtvhk499YMGVzddAge0KUDsiyNK

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      f1389a226231e404dd21ecf4aec843b65bbf93cd5f738e1a66ec9cf467df4de0.bin

    • Size

      1.2MB

    • MD5

      f105d966f93bf7d43e2918b609bfe3c0

    • SHA1

      8a39447ec4056aa7789d3dc2407113e9c3effa9a

    • SHA256

      f1389a226231e404dd21ecf4aec843b65bbf93cd5f738e1a66ec9cf467df4de0

    • SHA512

      0ce036e02eedad57cb7a1da94def14e32125ff705b4180d4dad90579328fafccaa7a96ef636ab383fbd4c56dad1c8a56b1e206e7fef73d70c20db7a7514ba676

    • SSDEEP

      24576:BVQCVvyI/k4Zf9YMGp77zdd0ZKUNk9e0KUDsM1dpkJNK35m:BVtvhk499YMGVzddAge0KUDsiyNK

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks