Overview

overview

10

Static

static

3

534856d602...fd.exe

windows7-x64

7

534856d602...fd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    534856d602e27b0e17a9f7debba2f554428cad4143cf10125a987864025378fd

  • Size

    1.1MB

  • Sample

    230506-1tvnfaaa58

  • MD5

    c3683432e5ebf6788e846f8894205ad5

  • SHA1

    6a2f646b71e2c05af57ae90ce2b5bf30cc01596b

  • SHA256

    534856d602e27b0e17a9f7debba2f554428cad4143cf10125a987864025378fd

  • SHA512

    b68ad2d0c30b68613b92bd671b3de33ace8cbab9b26ca11a2d1728490155c4cbe719113e82e9dc25bccb91d5208d0c406ad4357bebbf7a8fb8d47bd6c839dd9a

  • SSDEEP

    24576:kyX56C+GJBbc0O6ImQtZfphHQk3wH2YRFB4n84gDf:zMp0/I5tZffwrBFB4nfg

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      534856d602e27b0e17a9f7debba2f554428cad4143cf10125a987864025378fd

    • Size

      1.1MB

    • MD5

      c3683432e5ebf6788e846f8894205ad5

    • SHA1

      6a2f646b71e2c05af57ae90ce2b5bf30cc01596b

    • SHA256

      534856d602e27b0e17a9f7debba2f554428cad4143cf10125a987864025378fd

    • SHA512

      b68ad2d0c30b68613b92bd671b3de33ace8cbab9b26ca11a2d1728490155c4cbe719113e82e9dc25bccb91d5208d0c406ad4357bebbf7a8fb8d47bd6c839dd9a

    • SSDEEP

      24576:kyX56C+GJBbc0O6ImQtZfphHQk3wH2YRFB4n84gDf:zMp0/I5tZffwrBFB4nfg

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks