Overview

overview

10

Static

static

3

5bf35cf3d2...2e.exe

windows7-x64

10

5bf35cf3d2...2e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5bf35cf3d2de72fc8cb033866e6735320de6e064903d88f2f7714406d16d382e.bin

  • Size

    1.2MB

  • Sample

    230506-1z69esag75

  • MD5

    5675fa27ca454a0f4220329d863d7abe

  • SHA1

    5897c492e624178ac75d910af183ae0241c3067f

  • SHA256

    5bf35cf3d2de72fc8cb033866e6735320de6e064903d88f2f7714406d16d382e

  • SHA512

    7b83baa7344b84e9f771f567b3052f285b812156dd78a4eb96b185b1a8cdbc40194ec8f16588b441ef4f08a9ddb64024fba5f1cb3f6135c85fa3cfb2b449bd04

  • SSDEEP

    24576:+c9RstFRHwzmMZlFXCTYaOo2QduHmp8tagFhXskm:+cQrSmdcpOdp/gX

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      5bf35cf3d2de72fc8cb033866e6735320de6e064903d88f2f7714406d16d382e.bin

    • Size

      1.2MB

    • MD5

      5675fa27ca454a0f4220329d863d7abe

    • SHA1

      5897c492e624178ac75d910af183ae0241c3067f

    • SHA256

      5bf35cf3d2de72fc8cb033866e6735320de6e064903d88f2f7714406d16d382e

    • SHA512

      7b83baa7344b84e9f771f567b3052f285b812156dd78a4eb96b185b1a8cdbc40194ec8f16588b441ef4f08a9ddb64024fba5f1cb3f6135c85fa3cfb2b449bd04

    • SSDEEP

      24576:+c9RstFRHwzmMZlFXCTYaOo2QduHmp8tagFhXskm:+cQrSmdcpOdp/gX

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks