Overview

overview

10

Static

static

3

f1dd5438eb...13.exe

windows7-x64

10

f1dd5438eb...13.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1dd5438eb617f3260423ba84f6114d6ba9212d8c9eab9b56e50751a6ea79013.bin

  • Size

    990KB

  • Sample

    230505-y8ppmafb5w

  • MD5

    0267641397e27b03d8844956ab5a4595

  • SHA1

    02ce5f9b99b9c3406f356d08bb3736c1976b51c2

  • SHA256

    f1dd5438eb617f3260423ba84f6114d6ba9212d8c9eab9b56e50751a6ea79013

  • SHA512

    86b075ac5dcc007be5878d0fa98a85adeac897e4162c96bce9256bab01ab861c4be9092c94c6b00e48eaa623a95d29d86e6f3222af08b5cb989ef4001540b55d

  • SSDEEP

    24576:unUoY7pfy8Yg7Q7TsRZcKeD2Mzlnk+IY8Mlf:B7By87STskKefd5

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      f1dd5438eb617f3260423ba84f6114d6ba9212d8c9eab9b56e50751a6ea79013.bin

    • Size

      990KB

    • MD5

      0267641397e27b03d8844956ab5a4595

    • SHA1

      02ce5f9b99b9c3406f356d08bb3736c1976b51c2

    • SHA256

      f1dd5438eb617f3260423ba84f6114d6ba9212d8c9eab9b56e50751a6ea79013

    • SHA512

      86b075ac5dcc007be5878d0fa98a85adeac897e4162c96bce9256bab01ab861c4be9092c94c6b00e48eaa623a95d29d86e6f3222af08b5cb989ef4001540b55d

    • SSDEEP

      24576:unUoY7pfy8Yg7Q7TsRZcKeD2Mzlnk+IY8Mlf:B7By87STskKefd5

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks