Overview

overview

10

Static

static

3

3393e92548...95.exe

windows7-x64

7

3393e92548...95.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3393e925480732e15e616ae5df5755ebae98ed2b9b2ea58cdfab8b20132e4395

  • Size

    376KB

  • Sample

    230506-z4n3zafc36

  • MD5

    8b82dcd4258e70fe99cfc9017c97b67c

  • SHA1

    9b120a9cd65a9660cbea61782d0c9c7d180a3655

  • SHA256

    3393e925480732e15e616ae5df5755ebae98ed2b9b2ea58cdfab8b20132e4395

  • SHA512

    ef3e5c3006399e2a6c4bf3fb11afd3b04c1a5dbbb9e509b8854177230165aa81921fc9f3103dbd06b4c402aad40c86258daf8b8e97d6c908c909ef6be2ec6973

  • SSDEEP

    6144:K1y+bnr+fp0yN90QE7X7zbfzy+zH0tWKiamOdP/N967qtAbB+S1Ma6Vc+:7Mrry90h7fu+gEKiAk7qtAbYqMDVc+

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      3393e925480732e15e616ae5df5755ebae98ed2b9b2ea58cdfab8b20132e4395

    • Size

      376KB

    • MD5

      8b82dcd4258e70fe99cfc9017c97b67c

    • SHA1

      9b120a9cd65a9660cbea61782d0c9c7d180a3655

    • SHA256

      3393e925480732e15e616ae5df5755ebae98ed2b9b2ea58cdfab8b20132e4395

    • SHA512

      ef3e5c3006399e2a6c4bf3fb11afd3b04c1a5dbbb9e509b8854177230165aa81921fc9f3103dbd06b4c402aad40c86258daf8b8e97d6c908c909ef6be2ec6973

    • SSDEEP

      6144:K1y+bnr+fp0yN90QE7X7zbfzy+zH0tWKiamOdP/N967qtAbB+S1Ma6Vc+:7Mrry90h7fu+gEKiAk7qtAbYqMDVc+

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks