Overview

overview

10

Static

static

3

c1122a035e...64.exe

windows7-x64

10

c1122a035e...64.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1122a035e7ea3462edf8fc8fe8c2bf722514c7570d9933d78eeafb4ea87cc64.bin

  • Size

    1.3MB

  • Sample

    230505-x4s1tabb9v

  • MD5

    0ccb43142754db1c4a5e2f9786a5f592

  • SHA1

    9a1687fd29e10ce35858a529814b9ede7b2b3d8c

  • SHA256

    c1122a035e7ea3462edf8fc8fe8c2bf722514c7570d9933d78eeafb4ea87cc64

  • SHA512

    ad4ae67cdbb821c6d26acb7070f83c2358ca2ff91518d4be9fa5160a739c5270fa14050b0e308645b9658d7a535001693ff90a712ca1d7c888e9f24c54a6283f

  • SSDEEP

    24576:wOR69vbjPC6E/ejiI631d0ALtKexAQGCFs/y6aHW+uiwEfxaQ+1NG/GtS:wOObbE2ji/1KC8ip5aQcI+t

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      c1122a035e7ea3462edf8fc8fe8c2bf722514c7570d9933d78eeafb4ea87cc64.bin

    • Size

      1.3MB

    • MD5

      0ccb43142754db1c4a5e2f9786a5f592

    • SHA1

      9a1687fd29e10ce35858a529814b9ede7b2b3d8c

    • SHA256

      c1122a035e7ea3462edf8fc8fe8c2bf722514c7570d9933d78eeafb4ea87cc64

    • SHA512

      ad4ae67cdbb821c6d26acb7070f83c2358ca2ff91518d4be9fa5160a739c5270fa14050b0e308645b9658d7a535001693ff90a712ca1d7c888e9f24c54a6283f

    • SSDEEP

      24576:wOR69vbjPC6E/ejiI631d0ALtKexAQGCFs/y6aHW+uiwEfxaQ+1NG/GtS:wOObbE2ji/1KC8ip5aQcI+t

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks