Overview

overview

10

Static

static

3

f42a99198b...cb.exe

windows7-x64

10

f42a99198b...cb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f42a99198bcf6a86c12a665d1a889e56cadb7da262afbf087a9e5bc3712b72cb.bin

  • Size

    751KB

  • Sample

    230505-y93b4sfc9w

  • MD5

    03ee2c2b0c9e501d50d1e12684ef4bf6

  • SHA1

    444ef3c89c6f06c35063950ad0fb87d3e96a85bc

  • SHA256

    f42a99198bcf6a86c12a665d1a889e56cadb7da262afbf087a9e5bc3712b72cb

  • SHA512

    9cb7c9f79e856e30d58337b92df7b0d098615c239e075a61f311fd28a43df1e4f6dcb1a65fdc6e678b8d7487c9dd9817aebb7a7978025ab62d494930e0207664

  • SSDEEP

    12288:Ay90VoaWOvHEcP6z6KfsCnS8GMkr81HIe58Wf2BJG44jiR2wJlh48NWU8TFVJyZR:AyoWOJkPEaS8GMkr8ZIl/ci02JNWrTFC

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      f42a99198bcf6a86c12a665d1a889e56cadb7da262afbf087a9e5bc3712b72cb.bin

    • Size

      751KB

    • MD5

      03ee2c2b0c9e501d50d1e12684ef4bf6

    • SHA1

      444ef3c89c6f06c35063950ad0fb87d3e96a85bc

    • SHA256

      f42a99198bcf6a86c12a665d1a889e56cadb7da262afbf087a9e5bc3712b72cb

    • SHA512

      9cb7c9f79e856e30d58337b92df7b0d098615c239e075a61f311fd28a43df1e4f6dcb1a65fdc6e678b8d7487c9dd9817aebb7a7978025ab62d494930e0207664

    • SSDEEP

      12288:Ay90VoaWOvHEcP6z6KfsCnS8GMkr81HIe58Wf2BJG44jiR2wJlh48NWU8TFVJyZR:AyoWOJkPEaS8GMkr8ZIl/ci02JNWrTFC

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks