Overview

overview

10

Static

static

3

d80f7c0dff...b8.exe

windows7-x64

10

d80f7c0dff...b8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d80f7c0dff42326c38c328da68e5998e9c241b387e82a54fd5ea129eb6f98bb8.bin

  • Size

    690KB

  • Sample

    230505-yl8tzsah28

  • MD5

    3459f9df93d4fed59f48ce0c22c49b61

  • SHA1

    51c91b5e170c2da7fe509abf5d5fdfef46451260

  • SHA256

    d80f7c0dff42326c38c328da68e5998e9c241b387e82a54fd5ea129eb6f98bb8

  • SHA512

    d3cb85c5760c8bf3f4700a60bce37ab41a62a46d1d9b642167b5b2b184fd8ffb84be109524e30f54467bda8e27f223494f216386fa362e0c3f464c5eeb6c160f

  • SSDEEP

    12288:gy904/DJoQ7pjqtunYGw4rDEExQB2zZIJhkO+eQXwomwbrL6rSP6s3Ttw2jFkCKT:gyzeQ7pRny4vEEtzZ0kO+Zmwb36rSP6H

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      d80f7c0dff42326c38c328da68e5998e9c241b387e82a54fd5ea129eb6f98bb8.bin

    • Size

      690KB

    • MD5

      3459f9df93d4fed59f48ce0c22c49b61

    • SHA1

      51c91b5e170c2da7fe509abf5d5fdfef46451260

    • SHA256

      d80f7c0dff42326c38c328da68e5998e9c241b387e82a54fd5ea129eb6f98bb8

    • SHA512

      d3cb85c5760c8bf3f4700a60bce37ab41a62a46d1d9b642167b5b2b184fd8ffb84be109524e30f54467bda8e27f223494f216386fa362e0c3f464c5eeb6c160f

    • SSDEEP

      12288:gy904/DJoQ7pjqtunYGw4rDEExQB2zZIJhkO+eQXwomwbrL6rSP6s3Ttw2jFkCKT:gyzeQ7pRny4vEEtzZ0kO+Zmwb36rSP6H

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks