Overview

overview

10

Static

static

3

4d5b2f0205...ff.exe

windows7-x64

10

4d5b2f0205...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d5b2f02052935c877644b63eea652ff.exe.bin

  • Size

    700KB

  • Sample

    230506-1n33mahd78

  • MD5

    4d5b2f02052935c877644b63eea652ff

  • SHA1

    791ee65ad41ea52279c7615e3749f2a5cf6627f3

  • SHA256

    13f8e06cdca979725cb2dc62236fc05693223f1ff554423588e7737328e07e73

  • SHA512

    06f3845e3e2f363e24a4ad724d6a74b4e9c017eff2e18828f8aa132b6846e70c27fdec6ec09f8156c10d9e8bce3841b8fa569f896c4b590d043ec7ac2c7f9b42

  • SSDEEP

    12288:hy90wAf8aSF7F7ogxIY02pWS6IxEyS5wSV2E6k+LTRAF/vzG39rNyyR5BofieLsS:hyEKFxSYxpNPHSJV2E6FLTRAFSHyyR5S

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      4d5b2f02052935c877644b63eea652ff.exe.bin

    • Size

      700KB

    • MD5

      4d5b2f02052935c877644b63eea652ff

    • SHA1

      791ee65ad41ea52279c7615e3749f2a5cf6627f3

    • SHA256

      13f8e06cdca979725cb2dc62236fc05693223f1ff554423588e7737328e07e73

    • SHA512

      06f3845e3e2f363e24a4ad724d6a74b4e9c017eff2e18828f8aa132b6846e70c27fdec6ec09f8156c10d9e8bce3841b8fa569f896c4b590d043ec7ac2c7f9b42

    • SSDEEP

      12288:hy90wAf8aSF7F7ogxIY02pWS6IxEyS5wSV2E6k+LTRAF/vzG39rNyyR5BofieLsS:hyEKFxSYxpNPHSJV2E6FLTRAFSHyyR5S

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks