Overview

overview

10

Static

static

3

440b3f4bf5...8a.exe

windows7-x64

10

440b3f4bf5...8a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    440b3f4bf53cc8d89927b8043a94ee63823cecd21a21a4aa80d7c8154c57d48a

  • Size

    376KB

  • Sample

    230506-1f7e3sgf64

  • MD5

    8a48d4e1748b9117ac2d3e6cee043e04

  • SHA1

    6e7ac492f4961c6ccfde5d33b23069dbe7f3164a

  • SHA256

    440b3f4bf53cc8d89927b8043a94ee63823cecd21a21a4aa80d7c8154c57d48a

  • SHA512

    9733e7e6acaf657ce5d612646a5e5e1f852dd79afc1a1200cee3f7352f267de40de46ce14feecb1fd1e5176977d466489adbdc87baba4018d5f60d37276fe23e

  • SSDEEP

    6144:KJy+bnr+Np0yN90QE8kRN2onphyzaxyk17DlgC2X64wJ3RnHjynvFFl5Oyn0IWMd:XMrBy90We28SaP7DlQ64q3JQWyZ3d

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      440b3f4bf53cc8d89927b8043a94ee63823cecd21a21a4aa80d7c8154c57d48a

    • Size

      376KB

    • MD5

      8a48d4e1748b9117ac2d3e6cee043e04

    • SHA1

      6e7ac492f4961c6ccfde5d33b23069dbe7f3164a

    • SHA256

      440b3f4bf53cc8d89927b8043a94ee63823cecd21a21a4aa80d7c8154c57d48a

    • SHA512

      9733e7e6acaf657ce5d612646a5e5e1f852dd79afc1a1200cee3f7352f267de40de46ce14feecb1fd1e5176977d466489adbdc87baba4018d5f60d37276fe23e

    • SSDEEP

      6144:KJy+bnr+Np0yN90QE8kRN2onphyzaxyk17DlgC2X64wJ3RnHjynvFFl5Oyn0IWMd:XMrBy90We28SaP7DlQ64q3JQWyZ3d

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks