Overview

overview

10

Static

static

3

479c56d566...da.exe

windows7-x64

10

479c56d566...da.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    479c56d566048b547c38abbfae66e6b7dd679c012030ab4593a12a30873ff3da.bin

  • Size

    701KB

  • Sample

    230506-1jsq4aha24

  • MD5

    67446d2a011827c1a4b04aee56e3891b

  • SHA1

    54efb24003bcf2f68cd0ce6bc983d2be73426947

  • SHA256

    479c56d566048b547c38abbfae66e6b7dd679c012030ab4593a12a30873ff3da

  • SHA512

    c3522129a8125c161a151f86d80df119908dcb15b9f4f661f940c931391fb8ea3d0243f6bf119549b613de3fe5c1f7b2bec8264acbf237482cf636519c16bd11

  • SSDEEP

    12288:Dy90l5em2UNGtvak4ULYHM33L8EG2/o9waqQFbGprQ9bt825Y:DyOem2UNELYHM3pGLwtEcUpj5Y

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      479c56d566048b547c38abbfae66e6b7dd679c012030ab4593a12a30873ff3da.bin

    • Size

      701KB

    • MD5

      67446d2a011827c1a4b04aee56e3891b

    • SHA1

      54efb24003bcf2f68cd0ce6bc983d2be73426947

    • SHA256

      479c56d566048b547c38abbfae66e6b7dd679c012030ab4593a12a30873ff3da

    • SHA512

      c3522129a8125c161a151f86d80df119908dcb15b9f4f661f940c931391fb8ea3d0243f6bf119549b613de3fe5c1f7b2bec8264acbf237482cf636519c16bd11

    • SSDEEP

      12288:Dy90l5em2UNGtvak4ULYHM33L8EG2/o9waqQFbGprQ9bt825Y:DyOem2UNELYHM3pGLwtEcUpj5Y

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks