Overview

overview

10

Static

static

3

0a3d0a67eb...9c.exe

windows7-x64

10

0a3d0a67eb...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a3d0a67ebec92600b259e869c4ddadfa5fda8ef30b0b1008bd4db3d54bb269c.bin

  • Size

    701KB

  • Sample

    230506-y6jetsbd68

  • MD5

    3f9bab733b9ae00870ad9a3ab73124c8

  • SHA1

    a12135fd6fb52c90efd0ff1754c07e8becc3accd

  • SHA256

    0a3d0a67ebec92600b259e869c4ddadfa5fda8ef30b0b1008bd4db3d54bb269c

  • SHA512

    1d16d586e377db357a13b71f3bf1c25273ea8dafbd4589bb7623571e2bef7c5842b89ff74d5d951bd2c941b1709dc1a8bd19e5f3ff513b74ab9e33350cd56c25

  • SSDEEP

    12288:6y90S5qNm8ZHSwXnALCbh0N4eJoGeDBw6hRwBCNkDMPNj2Z4sG:6ysNEwXseeL56hRwBCNHPNjN

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      0a3d0a67ebec92600b259e869c4ddadfa5fda8ef30b0b1008bd4db3d54bb269c.bin

    • Size

      701KB

    • MD5

      3f9bab733b9ae00870ad9a3ab73124c8

    • SHA1

      a12135fd6fb52c90efd0ff1754c07e8becc3accd

    • SHA256

      0a3d0a67ebec92600b259e869c4ddadfa5fda8ef30b0b1008bd4db3d54bb269c

    • SHA512

      1d16d586e377db357a13b71f3bf1c25273ea8dafbd4589bb7623571e2bef7c5842b89ff74d5d951bd2c941b1709dc1a8bd19e5f3ff513b74ab9e33350cd56c25

    • SSDEEP

      12288:6y90S5qNm8ZHSwXnALCbh0N4eJoGeDBw6hRwBCNkDMPNj2Z4sG:6ysNEwXseeL56hRwBCNHPNjN

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks