Overview

overview

10

Static

static

3

1687d3441f...2b.exe

windows7-x64

10

1687d3441f...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1687d3441f196964017c49360c7767da6e24d4e4db8dfeccaffc8429791a722b.bin

  • Size

    644KB

  • Sample

    230506-zfffxsce48

  • MD5

    780b7f03e57ac57a318580b8ec503003

  • SHA1

    6829563f6cdb427ee39e688b3204e9de0467e330

  • SHA256

    1687d3441f196964017c49360c7767da6e24d4e4db8dfeccaffc8429791a722b

  • SHA512

    e540d119722c5b90897b1b97fc253509dbd25b3de15d24dbbfe79b56aa155e6bbf3f77384f41bf82be9c45a45c3c4403416915736a02681e073ee1ecc35e3460

  • SSDEEP

    12288:ky90XaKQf+koa0SKrX7jIQV8q3EuYkqV4/S+EN1giZ:kyp/fOavKr1VMurqG/q1ge

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      1687d3441f196964017c49360c7767da6e24d4e4db8dfeccaffc8429791a722b.bin

    • Size

      644KB

    • MD5

      780b7f03e57ac57a318580b8ec503003

    • SHA1

      6829563f6cdb427ee39e688b3204e9de0467e330

    • SHA256

      1687d3441f196964017c49360c7767da6e24d4e4db8dfeccaffc8429791a722b

    • SHA512

      e540d119722c5b90897b1b97fc253509dbd25b3de15d24dbbfe79b56aa155e6bbf3f77384f41bf82be9c45a45c3c4403416915736a02681e073ee1ecc35e3460

    • SSDEEP

      12288:ky90XaKQf+koa0SKrX7jIQV8q3EuYkqV4/S+EN1giZ:kyp/fOavKr1VMurqG/q1ge

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks