Overview

overview

10

Static

static

3

1233aee5e3...ef.exe

windows7-x64

7

1233aee5e3...ef.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1233aee5e3d608f415dc0315fcd507e245c676eb927cb6f7c52e96c618a506ef

  • Size

    376KB

  • Sample

    230506-zchf4sed5z

  • MD5

    6b5435940a9db7a53aa1b005ea2699b4

  • SHA1

    57c0008081904d4eb4e19da176a503d2a055ba9e

  • SHA256

    1233aee5e3d608f415dc0315fcd507e245c676eb927cb6f7c52e96c618a506ef

  • SHA512

    cf711c74e254757860111043345745ec56304f4dc6b5e1aabe583de60a882a0871ed0d40cf91c8515ab8a2cc381c9535edd1eccce63f5baa094eda2518abc67c

  • SSDEEP

    6144:KFy+bnr++p0yN90QEaIaRfitxqjblnT/qS1u3NJZkOSQteffAyQ:jMriy906RKPAlnTiSiNwbQEAyQ

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      1233aee5e3d608f415dc0315fcd507e245c676eb927cb6f7c52e96c618a506ef

    • Size

      376KB

    • MD5

      6b5435940a9db7a53aa1b005ea2699b4

    • SHA1

      57c0008081904d4eb4e19da176a503d2a055ba9e

    • SHA256

      1233aee5e3d608f415dc0315fcd507e245c676eb927cb6f7c52e96c618a506ef

    • SHA512

      cf711c74e254757860111043345745ec56304f4dc6b5e1aabe583de60a882a0871ed0d40cf91c8515ab8a2cc381c9535edd1eccce63f5baa094eda2518abc67c

    • SSDEEP

      6144:KFy+bnr++p0yN90QEaIaRfitxqjblnT/qS1u3NJZkOSQteffAyQ:jMriy906RKPAlnTiSiNwbQEAyQ

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks