Overview

overview

10

Static

static

3

c8d8e68104...83.exe

windows7-x64

10

c8d8e68104...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8d8e68104a5ee7fe17fe37179f0ee9116350e204ff98fafd817e02181ecad83.bin

  • Size

    1.2MB

  • Sample

    230505-x9wznahf67

  • MD5

    9dd6b8107c6095c9665aff5013c5f774

  • SHA1

    c2193398bfb2c58067f26622bf1883fc0f52f5d1

  • SHA256

    c8d8e68104a5ee7fe17fe37179f0ee9116350e204ff98fafd817e02181ecad83

  • SHA512

    c1bc0de93289a180e54337d598ebbb3573a8adc88fd0bacb7e0cfdf3800aef3a427a1d937e49fd2d0a5bf550cd71209299b97741fc5f21559e66bb8bc5e04725

  • SSDEEP

    24576:SJTQ1MCZCJyl7wU5zv38snXz/fbJufQkK/DmkzG66jWSZ2dAA7Ul26:SJWM1m775zv3VXDtIQgkzG6Lm2D7Ul2

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      c8d8e68104a5ee7fe17fe37179f0ee9116350e204ff98fafd817e02181ecad83.bin

    • Size

      1.2MB

    • MD5

      9dd6b8107c6095c9665aff5013c5f774

    • SHA1

      c2193398bfb2c58067f26622bf1883fc0f52f5d1

    • SHA256

      c8d8e68104a5ee7fe17fe37179f0ee9116350e204ff98fafd817e02181ecad83

    • SHA512

      c1bc0de93289a180e54337d598ebbb3573a8adc88fd0bacb7e0cfdf3800aef3a427a1d937e49fd2d0a5bf550cd71209299b97741fc5f21559e66bb8bc5e04725

    • SSDEEP

      24576:SJTQ1MCZCJyl7wU5zv38snXz/fbJufQkK/DmkzG66jWSZ2dAA7Ul26:SJWM1m775zv3VXDtIQgkzG6Lm2D7Ul2

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks