Overview

overview

10

Static

static

3

45c2ed896f...81.exe

windows7-x64

7

45c2ed896f...81.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    45c2ed896f4323dff0b5959f51e2c4df36f6e3329d95943858375e01cfd97b81

  • Size

    479KB

  • Sample

    230506-1hgx7sgg85

  • MD5

    fd7d427b3041dc3758fcde4d6c7dba33

  • SHA1

    e966159f3ddeaadc7bf7e46e3c38d0027ff0987c

  • SHA256

    45c2ed896f4323dff0b5959f51e2c4df36f6e3329d95943858375e01cfd97b81

  • SHA512

    4a1063a72ef2affb14d500f5c60e55a469076e87fec5a1c2ba9bc60add4127c4d8f487fbefdadb41dfcd6ca96c58c20ebd728b55ed793a8605030290415dc768

  • SSDEEP

    12288:UMrly907WLPkqHmYfNm1ST9MwOujOeEFDtubyzT:Jy6OPkGfAb2EFpjzT

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      45c2ed896f4323dff0b5959f51e2c4df36f6e3329d95943858375e01cfd97b81

    • Size

      479KB

    • MD5

      fd7d427b3041dc3758fcde4d6c7dba33

    • SHA1

      e966159f3ddeaadc7bf7e46e3c38d0027ff0987c

    • SHA256

      45c2ed896f4323dff0b5959f51e2c4df36f6e3329d95943858375e01cfd97b81

    • SHA512

      4a1063a72ef2affb14d500f5c60e55a469076e87fec5a1c2ba9bc60add4127c4d8f487fbefdadb41dfcd6ca96c58c20ebd728b55ed793a8605030290415dc768

    • SSDEEP

      12288:UMrly907WLPkqHmYfNm1ST9MwOujOeEFDtubyzT:Jy6OPkGfAb2EFpjzT

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks