Overview

overview

10

Static

static

3

45b5ccd78a...70.exe

windows7-x64

10

45b5ccd78a...70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    45b5ccd78ac1722cf3aac40c93bf85e31cbb7ded3402b34e18b212b889665470.bin

  • Size

    687KB

  • Sample

    230506-1hfp5sag4y

  • MD5

    05f75e2e73f49cc28dee712eaf0c7047

  • SHA1

    725c38af3f25d963310768bf31c5f5fe0d644480

  • SHA256

    45b5ccd78ac1722cf3aac40c93bf85e31cbb7ded3402b34e18b212b889665470

  • SHA512

    1d0a60f581f47edf9bb0fb8607cea398a456c2aa65af22a4266eabd8e39ea4f322a1f6766f4111decc2d91527bd0378975e9de4a3d75788e64179251a228a104

  • SSDEEP

    12288:Py90BtLECWtaHdjfeRz6fFryCSJplpVyDtRq0IBsuY3MN5c5oA/ZvRVssP/:PyPPk96z6f1Sblq9YsuYMjcpZpVz/

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      45b5ccd78ac1722cf3aac40c93bf85e31cbb7ded3402b34e18b212b889665470.bin

    • Size

      687KB

    • MD5

      05f75e2e73f49cc28dee712eaf0c7047

    • SHA1

      725c38af3f25d963310768bf31c5f5fe0d644480

    • SHA256

      45b5ccd78ac1722cf3aac40c93bf85e31cbb7ded3402b34e18b212b889665470

    • SHA512

      1d0a60f581f47edf9bb0fb8607cea398a456c2aa65af22a4266eabd8e39ea4f322a1f6766f4111decc2d91527bd0378975e9de4a3d75788e64179251a228a104

    • SSDEEP

      12288:Py90BtLECWtaHdjfeRz6fFryCSJplpVyDtRq0IBsuY3MN5c5oA/ZvRVssP/:PyPPk96z6f1Sblq9YsuYMjcpZpVz/

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks