Overview

overview

10

Static

static

3

46fc20df81...0c.exe

windows7-x64

10

46fc20df81...0c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    46fc20df817c268df3e550235da9ffb3f43122b2642e5ce90c6767b76bde970c

  • Size

    490KB

  • Sample

    230506-1jcd4sah2z

  • MD5

    0ac0da94d94a981f719372791cb2339c

  • SHA1

    44b62a8295be9f76da20d127f7b433458d4a35d1

  • SHA256

    46fc20df817c268df3e550235da9ffb3f43122b2642e5ce90c6767b76bde970c

  • SHA512

    7b9b1a056c9a4cf110b8b0951dc1e5f9ede60ad3961308333cec6665b14daaadd3b5fbf0d4589f393bbfd27fb1d8342aff772ae0075aeaf6f6a562f0030ad95e

  • SSDEEP

    6144:KRy+bnr+jp0yN90QE1YUoFeps+BDZFBiGo1Ds00qwyUMwKe9EMNx0cNVi5qwYhGl:bMr7y90DNoQTEDsJyNwR9hx0CVC5YWj

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      46fc20df817c268df3e550235da9ffb3f43122b2642e5ce90c6767b76bde970c

    • Size

      490KB

    • MD5

      0ac0da94d94a981f719372791cb2339c

    • SHA1

      44b62a8295be9f76da20d127f7b433458d4a35d1

    • SHA256

      46fc20df817c268df3e550235da9ffb3f43122b2642e5ce90c6767b76bde970c

    • SHA512

      7b9b1a056c9a4cf110b8b0951dc1e5f9ede60ad3961308333cec6665b14daaadd3b5fbf0d4589f393bbfd27fb1d8342aff772ae0075aeaf6f6a562f0030ad95e

    • SSDEEP

      6144:KRy+bnr+jp0yN90QE1YUoFeps+BDZFBiGo1Ds00qwyUMwKe9EMNx0cNVi5qwYhGl:bMr7y90DNoQTEDsJyNwR9hx0CVC5YWj

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks