Overview

overview

10

Static

static

3

66ab319bcd...47.exe

windows7-x64

7

66ab319bcd...47.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    66ab319bcd8f60012adac97bef5469e1710a82cd10085c4193f0b7d117dd1f47

  • Size

    376KB

  • Sample

    230506-173afabg75

  • MD5

    3cc25e4f1c08a9f0fa010efb60262eec

  • SHA1

    b822d12e6cbda1b8a027ccd04c1bf105b249a13d

  • SHA256

    66ab319bcd8f60012adac97bef5469e1710a82cd10085c4193f0b7d117dd1f47

  • SHA512

    35220e6cd925090d796161ffb7c3b1b47ab6cd92c382791154f0850b8c416029d73fbf6a416012f2d4acfb8a9d96d907e94c5fcc38e8496f61530b84a4a0a54e

  • SSDEEP

    6144:Kry+bnr+xp0yN90QEyp9KFfUu9YFysluCyjQOOcVPHplv0ov36cjabvqFDe:tMrZy90QRu9fsUqO7VheoPHUiNe

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      66ab319bcd8f60012adac97bef5469e1710a82cd10085c4193f0b7d117dd1f47

    • Size

      376KB

    • MD5

      3cc25e4f1c08a9f0fa010efb60262eec

    • SHA1

      b822d12e6cbda1b8a027ccd04c1bf105b249a13d

    • SHA256

      66ab319bcd8f60012adac97bef5469e1710a82cd10085c4193f0b7d117dd1f47

    • SHA512

      35220e6cd925090d796161ffb7c3b1b47ab6cd92c382791154f0850b8c416029d73fbf6a416012f2d4acfb8a9d96d907e94c5fcc38e8496f61530b84a4a0a54e

    • SSDEEP

      6144:Kry+bnr+xp0yN90QEyp9KFfUu9YFysluCyjQOOcVPHplv0ov36cjabvqFDe:tMrZy90QRu9fsUqO7VheoPHUiNe

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks