Overview

overview

10

Static

static

3

04dfea39bf...fc.exe

windows7-x64

10

04dfea39bf...fc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04dfea39bff2e034da883a31c502926c9a1394244903f97ee2e368da4f9b08fc

  • Size

    694KB

  • Sample

    230506-2lhjksdd42

  • MD5

    581325db2255e7a0a1aaba0e0d54df3b

  • SHA1

    9f254691e7f156b2f02b2275128ea77a6fa3ef9b

  • SHA256

    04dfea39bff2e034da883a31c502926c9a1394244903f97ee2e368da4f9b08fc

  • SHA512

    a7e873eb79f7124f168ae29e32fd31f6311ea74befd7f39cc12de2247c17b1bbe70684f7f78c29a6a80867656b3b34f7078eeb38ada5e31a42e8f9a4732f993a

  • SSDEEP

    12288:Ky90qFi3CJkqbkuM3B7HWeIwCOoqlniDVdUN0cRRbPEHBXqp1s0ghd1p:KyHiykqb3M5oqlOdUe4bU0ghJ

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      04dfea39bff2e034da883a31c502926c9a1394244903f97ee2e368da4f9b08fc

    • Size

      694KB

    • MD5

      581325db2255e7a0a1aaba0e0d54df3b

    • SHA1

      9f254691e7f156b2f02b2275128ea77a6fa3ef9b

    • SHA256

      04dfea39bff2e034da883a31c502926c9a1394244903f97ee2e368da4f9b08fc

    • SHA512

      a7e873eb79f7124f168ae29e32fd31f6311ea74befd7f39cc12de2247c17b1bbe70684f7f78c29a6a80867656b3b34f7078eeb38ada5e31a42e8f9a4732f993a

    • SSDEEP

      12288:Ky90qFi3CJkqbkuM3B7HWeIwCOoqlniDVdUN0cRRbPEHBXqp1s0ghd1p:KyHiykqb3M5oqlOdUe4bU0ghJ

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks