Overview

overview

10

Static

static

3

511662f6bd...e6.exe

windows7-x64

7

511662f6bd...e6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    511662f6bdfd422cb09c5b8f74ed7553e0852141d77143921a7a3be32429a1e6

  • Size

    376KB

  • Sample

    230506-1r444ahg73

  • MD5

    6e63a36f4651eccbb91328a2de07db55

  • SHA1

    0da2a52382afb7ecf1ea791f418d40b1920d4ea3

  • SHA256

    511662f6bdfd422cb09c5b8f74ed7553e0852141d77143921a7a3be32429a1e6

  • SHA512

    7b1abcedb5c0adaa3905d4faaccd6878d0693bc1dac1e93036b4701aaa0574102ac2819c4db10c9ff6030b251bd2287782d954f5c2aa42628b28aa02f3d7a3ff

  • SSDEEP

    6144:Kzy+bnr+Pp0yN90QEtmAVsL4IwFFH9qd80nOc/54PFErDsBDfJ9BMSfS1:BMrzy90Dma7qd8k7xIFODMx9BhfS1

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      511662f6bdfd422cb09c5b8f74ed7553e0852141d77143921a7a3be32429a1e6

    • Size

      376KB

    • MD5

      6e63a36f4651eccbb91328a2de07db55

    • SHA1

      0da2a52382afb7ecf1ea791f418d40b1920d4ea3

    • SHA256

      511662f6bdfd422cb09c5b8f74ed7553e0852141d77143921a7a3be32429a1e6

    • SHA512

      7b1abcedb5c0adaa3905d4faaccd6878d0693bc1dac1e93036b4701aaa0574102ac2819c4db10c9ff6030b251bd2287782d954f5c2aa42628b28aa02f3d7a3ff

    • SSDEEP

      6144:Kzy+bnr+Pp0yN90QEtmAVsL4IwFFH9qd80nOc/54PFErDsBDfJ9BMSfS1:BMrzy90Dma7qd8k7xIFODMx9BhfS1

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks