Overview

overview

10

Static

static

3

cfb678516d...42.exe

windows7-x64

10

cfb678516d...42.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfb678516dd22f373c6e617fe98753f39a89cd6a2813ec2ac75cbb2a685caa42.bin

  • Size

    694KB

  • Sample

    230505-ye4lpacc8s

  • MD5

    d98c5516bca2abb6d3cd742e566c8bff

  • SHA1

    56818561d6e53232a1c3d34a1817e3907e447911

  • SHA256

    cfb678516dd22f373c6e617fe98753f39a89cd6a2813ec2ac75cbb2a685caa42

  • SHA512

    38628a26f2fc09fd82929c963a169573bc9ebc95363554581bcd5a9f85fd62a6a207ccb8884e5f1cae6e8e9a6e4379637afa9c6f347e90c8ef32788b27c81b80

  • SSDEEP

    12288:4y90KTooyyuz+Av0Nr8DVMcEtsFAzeiJENx0ttcHmYEH4W/v4o4dxM:4yFTooybz3v0Z8DzDukmvjX4FdxM

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      cfb678516dd22f373c6e617fe98753f39a89cd6a2813ec2ac75cbb2a685caa42.bin

    • Size

      694KB

    • MD5

      d98c5516bca2abb6d3cd742e566c8bff

    • SHA1

      56818561d6e53232a1c3d34a1817e3907e447911

    • SHA256

      cfb678516dd22f373c6e617fe98753f39a89cd6a2813ec2ac75cbb2a685caa42

    • SHA512

      38628a26f2fc09fd82929c963a169573bc9ebc95363554581bcd5a9f85fd62a6a207ccb8884e5f1cae6e8e9a6e4379637afa9c6f347e90c8ef32788b27c81b80

    • SSDEEP

      12288:4y90KTooyyuz+Av0Nr8DVMcEtsFAzeiJENx0ttcHmYEH4W/v4o4dxM:4yFTooybz3v0Z8DzDukmvjX4FdxM

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks