Overview

overview

10

Static

static

3

14cb15bfc6...cf.exe

windows7-x64

10

14cb15bfc6...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14cb15bfc6c567225f9c19006ef79650eaf0622e5790317f7be2aae647f7e3cf.bin

  • Size

    701KB

  • Sample

    230506-zea5taef3t

  • MD5

    4bcaf8cdbef79b4dc47c3a4ee21da181

  • SHA1

    d7baa68613ffa89f3e98ab6a1dbfbc091d8a1205

  • SHA256

    14cb15bfc6c567225f9c19006ef79650eaf0622e5790317f7be2aae647f7e3cf

  • SHA512

    3b3910178d40b6cdbf987b755121c1741984ac6dc2392493f4eeabafb0670c4e475fdcdcf3e8de8f65c31afdfd5db998c87e28d9969da36c49ca065af9c61020

  • SSDEEP

    12288:Zy907uUizD6uPZRNT/x8FPclOhgVXb9jMpGiG8GJrGVRmBnBccqoXr:ZyYuFOuxRNTx8lcIhm9jVrGVRmBn2lU

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      14cb15bfc6c567225f9c19006ef79650eaf0622e5790317f7be2aae647f7e3cf.bin

    • Size

      701KB

    • MD5

      4bcaf8cdbef79b4dc47c3a4ee21da181

    • SHA1

      d7baa68613ffa89f3e98ab6a1dbfbc091d8a1205

    • SHA256

      14cb15bfc6c567225f9c19006ef79650eaf0622e5790317f7be2aae647f7e3cf

    • SHA512

      3b3910178d40b6cdbf987b755121c1741984ac6dc2392493f4eeabafb0670c4e475fdcdcf3e8de8f65c31afdfd5db998c87e28d9969da36c49ca065af9c61020

    • SSDEEP

      12288:Zy907uUizD6uPZRNT/x8FPclOhgVXb9jMpGiG8GJrGVRmBnBccqoXr:ZyYuFOuxRNTx8lcIhm9jVrGVRmBn2lU

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks