Overview

overview

10

Static

static

3

22150f5402...4e.exe

windows7-x64

7

22150f5402...4e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    22150f5402af0bf9e5499fbabb29204f15ae325defcb622efab648e4e9075f4e

  • Size

    480KB

  • Sample

    230506-zrwmaadg66

  • MD5

    0c563632acf95e508e5e3d1d8b794651

  • SHA1

    c84f566c8411d6fd4060baee5d9c09538db118ff

  • SHA256

    22150f5402af0bf9e5499fbabb29204f15ae325defcb622efab648e4e9075f4e

  • SHA512

    f8f2d07ee70c2f1a97c9e938d9706f06b8b75c32dbe0c2a79db94685233a1945530722626b89f54cbbf178013935a2231f314bca80eb969223f45c5850177cb4

  • SSDEEP

    12288:sMrCy90JnFbZR1dRFWLF2a0n9DTUEgesINhGm:myQvR1oYaC9T1NDx

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      22150f5402af0bf9e5499fbabb29204f15ae325defcb622efab648e4e9075f4e

    • Size

      480KB

    • MD5

      0c563632acf95e508e5e3d1d8b794651

    • SHA1

      c84f566c8411d6fd4060baee5d9c09538db118ff

    • SHA256

      22150f5402af0bf9e5499fbabb29204f15ae325defcb622efab648e4e9075f4e

    • SHA512

      f8f2d07ee70c2f1a97c9e938d9706f06b8b75c32dbe0c2a79db94685233a1945530722626b89f54cbbf178013935a2231f314bca80eb969223f45c5850177cb4

    • SSDEEP

      12288:sMrCy90JnFbZR1dRFWLF2a0n9DTUEgesINhGm:myQvR1oYaC9T1NDx

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks