Overview

overview

10

Static

static

3

cd0199552d...4b.exe

windows7-x64

10

cd0199552d...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd0199552de702060ddcda663a751021488f8a9cce2be4406aacf1fc3b5ebb4b.bin

  • Size

    884KB

  • Sample

    230505-ydjvwsaa57

  • MD5

    f7fc6bd9feb69be6a644430c64bd90a7

  • SHA1

    809d48c2b4ea9ca9477846ceb6ba646fe2aea9a3

  • SHA256

    cd0199552de702060ddcda663a751021488f8a9cce2be4406aacf1fc3b5ebb4b

  • SHA512

    9a43bacfb18887cbd08c908d128ce83e5835f0dd093c0164a780e5dd5b2823778a59f2dd8fcefe290e48864465c1c7d1bfefca83ecb02933f5dd6d2cf42f685e

  • SSDEEP

    12288:Xy90LqXXpxh3u3oOdZtCH+IyYBNrmfoeCr2rIoNegto+qfYEV/tGzed8l8z/8ZSz:XykkmnWgMZmfoKH8fd1Ued8Kkc8c

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      cd0199552de702060ddcda663a751021488f8a9cce2be4406aacf1fc3b5ebb4b.bin

    • Size

      884KB

    • MD5

      f7fc6bd9feb69be6a644430c64bd90a7

    • SHA1

      809d48c2b4ea9ca9477846ceb6ba646fe2aea9a3

    • SHA256

      cd0199552de702060ddcda663a751021488f8a9cce2be4406aacf1fc3b5ebb4b

    • SHA512

      9a43bacfb18887cbd08c908d128ce83e5835f0dd093c0164a780e5dd5b2823778a59f2dd8fcefe290e48864465c1c7d1bfefca83ecb02933f5dd6d2cf42f685e

    • SSDEEP

      12288:Xy90LqXXpxh3u3oOdZtCH+IyYBNrmfoeCr2rIoNegto+qfYEV/tGzed8l8z/8ZSz:XykkmnWgMZmfoKH8fd1Ued8Kkc8c

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks