Overview

overview

10

Static

static

3

54e1cb4694...8e.exe

windows7-x64

10

54e1cb4694...8e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    54e1cb46943ceecfac4e6de482d73eb38c5aefeac1140169624d5ca5b05fdd8e.bin

  • Size

    1.2MB

  • Sample

    230506-1vxjesab75

  • MD5

    8ab25864a671b01cee7cdf5bb1a43fbe

  • SHA1

    c923c8487afef5babdb1729cffbf6c21ffece77c

  • SHA256

    54e1cb46943ceecfac4e6de482d73eb38c5aefeac1140169624d5ca5b05fdd8e

  • SHA512

    b62f590d54f36d58b4c5124950cfb646d1a4a55989a40ade0008e9ebd2d247b966ea9e35ade4079c84d5fffeb0d2ea351c6035d05d7b7e7f20f089c617c86c25

  • SSDEEP

    24576:VU9r6tqfbfEoHJBTmDShhh7YMWFqqGRhHhLJRK+Mk3/:VUkt8NTmWhhh7Y/q3H9JbMk3

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      54e1cb46943ceecfac4e6de482d73eb38c5aefeac1140169624d5ca5b05fdd8e.bin

    • Size

      1.2MB

    • MD5

      8ab25864a671b01cee7cdf5bb1a43fbe

    • SHA1

      c923c8487afef5babdb1729cffbf6c21ffece77c

    • SHA256

      54e1cb46943ceecfac4e6de482d73eb38c5aefeac1140169624d5ca5b05fdd8e

    • SHA512

      b62f590d54f36d58b4c5124950cfb646d1a4a55989a40ade0008e9ebd2d247b966ea9e35ade4079c84d5fffeb0d2ea351c6035d05d7b7e7f20f089c617c86c25

    • SSDEEP

      24576:VU9r6tqfbfEoHJBTmDShhh7YMWFqqGRhHhLJRK+Mk3/:VUkt8NTmWhhh7Y/q3H9JbMk3

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks