Overview

overview

10

Static

static

3

3116cccf35...ab.exe

windows7-x64

10

3116cccf35...ab.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3116cccf35581c3e00517a25944f22478bf22fb7398b38b526eee74a83253dab.bin

  • Size

    1.2MB

  • Sample

    230506-z25b6shb3v

  • MD5

    04c6b377deca357865a50fada0b97793

  • SHA1

    b7b5f1900109fc42d056e2dcdf81584c970d28b2

  • SHA256

    3116cccf35581c3e00517a25944f22478bf22fb7398b38b526eee74a83253dab

  • SHA512

    699548144341b639193b410d450b532fc6c2eda8ee66d091847ee99b63b4af117826e841f7d11f3dccda533aba5c43cd2c5e2e7c64c56a26fc87436df33cf79b

  • SSDEEP

    24576:UO/ma41pNBrquMHuDpKqJUd5xYsLo11YdH/tFrQhldU8HJVYx+dblqaWSLO:UOXedEODpKqJGYsLMutFEIx257

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      3116cccf35581c3e00517a25944f22478bf22fb7398b38b526eee74a83253dab.bin

    • Size

      1.2MB

    • MD5

      04c6b377deca357865a50fada0b97793

    • SHA1

      b7b5f1900109fc42d056e2dcdf81584c970d28b2

    • SHA256

      3116cccf35581c3e00517a25944f22478bf22fb7398b38b526eee74a83253dab

    • SHA512

      699548144341b639193b410d450b532fc6c2eda8ee66d091847ee99b63b4af117826e841f7d11f3dccda533aba5c43cd2c5e2e7c64c56a26fc87436df33cf79b

    • SSDEEP

      24576:UO/ma41pNBrquMHuDpKqJUd5xYsLo11YdH/tFrQhldU8HJVYx+dblqaWSLO:UOXedEODpKqJGYsLMutFEIx257

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks