Overview

overview

10

Static

static

3

9d6d356cf9...32.exe

windows7-x64

10

9d6d356cf9...32.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9d6d356cf995c731752fc56e5ed866550c0010c522f119b706d60e72cb469d32.bin

  • Size

    693KB

  • Sample

    230505-xbwk8sgd7t

  • MD5

    a88b7668feabe5693c36f50e174514bb

  • SHA1

    57694cdea9b5c57949c52547976035166fb87cce

  • SHA256

    9d6d356cf995c731752fc56e5ed866550c0010c522f119b706d60e72cb469d32

  • SHA512

    774a6a86147adadacaf565b67539d2fd8e4ee435a8f56075ac705f66f6e71980d703fb9ffdfda460b45284f0944a1cf1120a194b51f0a77f561a278a917bb32a

  • SSDEEP

    12288:Py90Isk/9Kdf0n0yUi4lo9WX1cIqlcwKKrzP6IhgZ8VNV7m/Nyeg:Pyvsd0nHr4Oy/yzzyANV7mljg

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      9d6d356cf995c731752fc56e5ed866550c0010c522f119b706d60e72cb469d32.bin

    • Size

      693KB

    • MD5

      a88b7668feabe5693c36f50e174514bb

    • SHA1

      57694cdea9b5c57949c52547976035166fb87cce

    • SHA256

      9d6d356cf995c731752fc56e5ed866550c0010c522f119b706d60e72cb469d32

    • SHA512

      774a6a86147adadacaf565b67539d2fd8e4ee435a8f56075ac705f66f6e71980d703fb9ffdfda460b45284f0944a1cf1120a194b51f0a77f561a278a917bb32a

    • SSDEEP

      12288:Py90Isk/9Kdf0n0yUi4lo9WX1cIqlcwKKrzP6IhgZ8VNV7m/Nyeg:Pyvsd0nHr4Oy/yzzyANV7mljg

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks