Overview

overview

10

Static

static

3

c611eb80a8...f2.exe

windows7-x64

10

c611eb80a8...f2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c611eb80a876b934b7baffd23e8a7e59f30bb852aa5dfe4881a47520ded23ff2.bin

  • Size

    642KB

  • Sample

    230505-x8drpabe9y

  • MD5

    88040981837527a7f29adc05c8e6a69a

  • SHA1

    ad13a009dd0ba88e46f074b5416a4479021b9a3d

  • SHA256

    c611eb80a876b934b7baffd23e8a7e59f30bb852aa5dfe4881a47520ded23ff2

  • SHA512

    91ab171c695adfd2a2d51e51fc1fb800759096bb89b31222c441d223c033499af9f01014c75cd16590041caaba5ad3ba2e45935aca8df4e895131056e3f20ec7

  • SSDEEP

    12288:zy90fBeV4r4p4YNPH4WMXtj17Y92LSyzHcXIwZZa94UWW873:zygW49kAWMN17cWcYwZzP73

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      c611eb80a876b934b7baffd23e8a7e59f30bb852aa5dfe4881a47520ded23ff2.bin

    • Size

      642KB

    • MD5

      88040981837527a7f29adc05c8e6a69a

    • SHA1

      ad13a009dd0ba88e46f074b5416a4479021b9a3d

    • SHA256

      c611eb80a876b934b7baffd23e8a7e59f30bb852aa5dfe4881a47520ded23ff2

    • SHA512

      91ab171c695adfd2a2d51e51fc1fb800759096bb89b31222c441d223c033499af9f01014c75cd16590041caaba5ad3ba2e45935aca8df4e895131056e3f20ec7

    • SSDEEP

      12288:zy90fBeV4r4p4YNPH4WMXtj17Y92LSyzHcXIwZZa94UWW873:zygW49kAWMN17cWcYwZzP73

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks