Overview

overview

10

Static

static

3

6b574eaeec...46.exe

windows7-x64

7

6b574eaeec...46.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6b574eaeec32a51c4dac2e7894427e00a19470f357215369c1545528c8659946

  • Size

    599KB

  • Sample

    230506-2aznqadh9z

  • MD5

    f9c4f59cc3034acec0079ccc1f951de5

  • SHA1

    307ded1af15fa207749141ac113e61cf54127867

  • SHA256

    6b574eaeec32a51c4dac2e7894427e00a19470f357215369c1545528c8659946

  • SHA512

    7b872ef3ef9e77ec03f3badfc0ccda854985abf07aa50b1218f599426bd9502a468d78201b7a0fab5ecc211a09fd20da5d300720ad14c2445be0d4fd46466f52

  • SSDEEP

    12288:RMrSy90XAKQcuXPSoX1IVSjo+PL2rdAoyTAFqyLVCaA:nybcuagas12rdAi4yJCaA

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      6b574eaeec32a51c4dac2e7894427e00a19470f357215369c1545528c8659946

    • Size

      599KB

    • MD5

      f9c4f59cc3034acec0079ccc1f951de5

    • SHA1

      307ded1af15fa207749141ac113e61cf54127867

    • SHA256

      6b574eaeec32a51c4dac2e7894427e00a19470f357215369c1545528c8659946

    • SHA512

      7b872ef3ef9e77ec03f3badfc0ccda854985abf07aa50b1218f599426bd9502a468d78201b7a0fab5ecc211a09fd20da5d300720ad14c2445be0d4fd46466f52

    • SSDEEP

      12288:RMrSy90XAKQcuXPSoX1IVSjo+PL2rdAoyTAFqyLVCaA:nybcuagas12rdAi4yJCaA

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks