Overview

overview

10

Static

static

3

4560271347...cd.exe

windows7-x64

10

4560271347...cd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    45602713475314becb0f226a86254af8fc94602daaecf75bc82fee7271a23ecd.bin

  • Size

    694KB

  • Sample

    230506-1g7ggaag2z

  • MD5

    fb8288fb85a084106231132ca55452f5

  • SHA1

    aa93f4e6b2a9132ec0bfd4005a2cbe30faabdde5

  • SHA256

    45602713475314becb0f226a86254af8fc94602daaecf75bc82fee7271a23ecd

  • SHA512

    cd412d81663aead40c7a41274c87154f31b95f3e744ba4fadbff1c00352b75653b5a2309ce44eafc568fb7809f44a9c444eded4b605cb0e8c097425472b054e2

  • SSDEEP

    12288:jy90/IbtPmN86pw58bRaeqxOCgshsxgpqlni/VdUN0cRvbP56BKvym772KR:jyggM8Yw5yaxwzOsxgpqlKdUeabV1R

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      45602713475314becb0f226a86254af8fc94602daaecf75bc82fee7271a23ecd.bin

    • Size

      694KB

    • MD5

      fb8288fb85a084106231132ca55452f5

    • SHA1

      aa93f4e6b2a9132ec0bfd4005a2cbe30faabdde5

    • SHA256

      45602713475314becb0f226a86254af8fc94602daaecf75bc82fee7271a23ecd

    • SHA512

      cd412d81663aead40c7a41274c87154f31b95f3e744ba4fadbff1c00352b75653b5a2309ce44eafc568fb7809f44a9c444eded4b605cb0e8c097425472b054e2

    • SSDEEP

      12288:jy90/IbtPmN86pw58bRaeqxOCgshsxgpqlni/VdUN0cRvbP56BKvym772KR:jyggM8Yw5yaxwzOsxgpqlKdUeabV1R

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks