General
-
Target
3a233b98bc1a4f358b848e143e0b5cb8e310eba5e35b453adbbd17106552d163.bin
-
Size
702KB
-
Sample
230507-bhsx2afe99
-
MD5
38917df14930c01c2cd9bc5724c1a21a
-
SHA1
b308686e0427e2b19c2de8a9e1700396af3f1455
-
SHA256
3a233b98bc1a4f358b848e143e0b5cb8e310eba5e35b453adbbd17106552d163
-
SHA512
c4f29ef38a836553267744033d2a98358e7dacc0353aaf677c7e47eeb0eec2cd0b2d3c91c9edb9482c5ffcd686f6bd260c502129076cf2dd21d796cbbcc04b50
-
SSDEEP
12288:Zy90NwK/g2JW8gleN9r3BQk0j8cbXUGF18iWfEG2Qo9w+6ECdXIMttG6:Zy3uJW1eBN46cGiwdXiMttG6
Static task
static1
Behavioral task
behavioral1
Sample
3a233b98bc1a4f358b848e143e0b5cb8e310eba5e35b453adbbd17106552d163.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3a233b98bc1a4f358b848e143e0b5cb8e310eba5e35b453adbbd17106552d163.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
3a233b98bc1a4f358b848e143e0b5cb8e310eba5e35b453adbbd17106552d163.bin
-
Size
702KB
-
MD5
38917df14930c01c2cd9bc5724c1a21a
-
SHA1
b308686e0427e2b19c2de8a9e1700396af3f1455
-
SHA256
3a233b98bc1a4f358b848e143e0b5cb8e310eba5e35b453adbbd17106552d163
-
SHA512
c4f29ef38a836553267744033d2a98358e7dacc0353aaf677c7e47eeb0eec2cd0b2d3c91c9edb9482c5ffcd686f6bd260c502129076cf2dd21d796cbbcc04b50
-
SSDEEP
12288:Zy90NwK/g2JW8gleN9r3BQk0j8cbXUGF18iWfEG2Qo9w+6ECdXIMttG6:Zy3uJW1eBN46cGiwdXiMttG6
-
Detects Redline Stealer samples
This rule detects the presence of Redline Stealer samples based on their unique strings.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-