Overview

overview

10

Static

static

3

cf813ae981...7f.exe

windows7-x64

10

cf813ae981...7f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf813ae98126430a2dd9d3454eb6054b7cdca328216024b591a7aaf5911cf27f.bin

  • Size

    746KB

  • Sample

    230505-yezbzacc7t

  • MD5

    74c61ac5005bcb4c497397f20ecade41

  • SHA1

    721476f48ca4d5116f5ec5cd32d09adf515bc7e5

  • SHA256

    cf813ae98126430a2dd9d3454eb6054b7cdca328216024b591a7aaf5911cf27f

  • SHA512

    cb93cfee773b2a8092ab52001886f9b117f77eaef89910d4be0e2dfed53656079b2f43d95e8ba9db33cb1cff9b479f8e89b29f372f9cf386c13704742d29e837

  • SSDEEP

    12288:Ty90iLXGBt7xB6mpwNTe/KmUO3ofoioANoCKCSx9CqOYg2Fql:TyjaD7xN0UKmUro7x93OYg2ol

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      cf813ae98126430a2dd9d3454eb6054b7cdca328216024b591a7aaf5911cf27f.bin

    • Size

      746KB

    • MD5

      74c61ac5005bcb4c497397f20ecade41

    • SHA1

      721476f48ca4d5116f5ec5cd32d09adf515bc7e5

    • SHA256

      cf813ae98126430a2dd9d3454eb6054b7cdca328216024b591a7aaf5911cf27f

    • SHA512

      cb93cfee773b2a8092ab52001886f9b117f77eaef89910d4be0e2dfed53656079b2f43d95e8ba9db33cb1cff9b479f8e89b29f372f9cf386c13704742d29e837

    • SSDEEP

      12288:Ty90iLXGBt7xB6mpwNTe/KmUO3ofoioANoCKCSx9CqOYg2Fql:TyjaD7xN0UKmUro7x93OYg2ol

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks