redline | 52c4c5809e6d3a1644d5a215177d886539fc9f637cbd8fbe7c3e325a760e5bd2 | Triage

Sharing

General

Target

52c4c5809e6d3a1644d5a215177d886539fc9f637cbd8fbe7c3e325a760e5bd2.bin
Size

1.0MB
Sample

230506-1tcsmahh99
MD5

7d3ef6e72434896ea98cf277231c64c2
SHA1

40867eb270fa52cfa8a4c33b9d55aa3f8d98691a
SHA256

52c4c5809e6d3a1644d5a215177d886539fc9f637cbd8fbe7c3e325a760e5bd2
SHA512

c0a62830a542a90b00acf3c654b91d6e5b5c99906cbc3f989ce2ffd20b147733d7b7b75df025d08fe618490abdfc1cdc4bb030ad0659c6f96a508be59f6cc998
SSDEEP

24576:jCAYkSvuevX2o0Kjm4BNQyv39+v19w6NpkH+RQ0R4owkPiyFG7HEK:7StvX2ozjm4HFv3M0ckH+RocjFG

Score

10^/10

redline evasion infostealer persistence stealer trojan

Malware Config

Targets

- Target
  
  52c4c5809e6d3a1644d5a215177d886539fc9f637cbd8fbe7c3e325a760e5bd2.bin
- Size
  
  1.0MB
- MD5
  
  7d3ef6e72434896ea98cf277231c64c2
- SHA1
  
  40867eb270fa52cfa8a4c33b9d55aa3f8d98691a
- SHA256
  
  52c4c5809e6d3a1644d5a215177d886539fc9f637cbd8fbe7c3e325a760e5bd2
- SHA512
  
  c0a62830a542a90b00acf3c654b91d6e5b5c99906cbc3f989ce2ffd20b147733d7b7b75df025d08fe618490abdfc1cdc4bb030ad0659c6f96a508be59f6cc998
- SSDEEP
  
  24576:jCAYkSvuevX2o0Kjm4BNQyv39+v19w6NpkH+RQ0R4owkPiyFG7HEK:7StvX2ozjm4HFv3M0ckH+RocjFG
Score

10^/10

evasion persistence trojan redline infostealer stealer
- Detects Redline Stealer samples
  This rule detects the presence of Redline Stealer samples based on their unique strings.
  stealer
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

redlineevasioninfostealerpersistencestealertrojan