Overview

overview

10

Static

static

3

399ee73ca5...25.exe

windows7-x64

7

399ee73ca5...25.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    399ee73ca5fd42f4aeda9593c0d2ce8624c81c22117a37e3c7d13673e8bf0725

  • Size

    376KB

  • Sample

    230506-z8wzdahg7y

  • MD5

    ee94fc5cc7de14385f4a7ab654990020

  • SHA1

    fbeb5f0263a1b68c9172e6f74b23d5c89c76af95

  • SHA256

    399ee73ca5fd42f4aeda9593c0d2ce8624c81c22117a37e3c7d13673e8bf0725

  • SHA512

    d2986c3e8fcefb81129131c35aae593ace9303fbd507f61aa832afdfa84f076094e3760da42853f492c49a0f5a04eb21023420acbbb6bdc5dc6100afaa62b38b

  • SSDEEP

    6144:Kdy+bnr+Hp0yN90QEH3ilc5H+X5VKQLkj2OoqMBOTs716VYz+Lhed:rMr/y90J3iidQynoOTs7oaiNed

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      399ee73ca5fd42f4aeda9593c0d2ce8624c81c22117a37e3c7d13673e8bf0725

    • Size

      376KB

    • MD5

      ee94fc5cc7de14385f4a7ab654990020

    • SHA1

      fbeb5f0263a1b68c9172e6f74b23d5c89c76af95

    • SHA256

      399ee73ca5fd42f4aeda9593c0d2ce8624c81c22117a37e3c7d13673e8bf0725

    • SHA512

      d2986c3e8fcefb81129131c35aae593ace9303fbd507f61aa832afdfa84f076094e3760da42853f492c49a0f5a04eb21023420acbbb6bdc5dc6100afaa62b38b

    • SSDEEP

      6144:Kdy+bnr+Hp0yN90QEH3ilc5H+X5VKQLkj2OoqMBOTs716VYz+Lhed:rMr/y90J3iidQynoOTs7oaiNed

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks