Overview

overview

10

Static

static

3

9d8e2b7fe9...09.exe

windows7-x64

10

9d8e2b7fe9...09.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d8e2b7fe96f5fac74717f3c3eddd7a3348294a0ab34a7850dba7879b9eaca09.bin

  • Size

    651KB

  • Sample

    230505-xbyetsec84

  • MD5

    bc7af4eeda3ba6cdc19bf6ab20393253

  • SHA1

    8625756e9f1913ed58f3dc01c67ca1a20433e406

  • SHA256

    9d8e2b7fe96f5fac74717f3c3eddd7a3348294a0ab34a7850dba7879b9eaca09

  • SHA512

    e861e090b440c8c293da3f0da02d98a1b1d19a67388850795b567eda2e5b8674a75dcc88294d66d5059f2eefadc11f35b47792de4e02c41ed58b9baf01e43e3d

  • SSDEEP

    12288:8y90SAgLHtmU2ptJ/Pxug6iJ4y/n0l//28mQWnvyYU:8yFxJ2ptJ/PxugnUX285WnvyYU

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      9d8e2b7fe96f5fac74717f3c3eddd7a3348294a0ab34a7850dba7879b9eaca09.bin

    • Size

      651KB

    • MD5

      bc7af4eeda3ba6cdc19bf6ab20393253

    • SHA1

      8625756e9f1913ed58f3dc01c67ca1a20433e406

    • SHA256

      9d8e2b7fe96f5fac74717f3c3eddd7a3348294a0ab34a7850dba7879b9eaca09

    • SHA512

      e861e090b440c8c293da3f0da02d98a1b1d19a67388850795b567eda2e5b8674a75dcc88294d66d5059f2eefadc11f35b47792de4e02c41ed58b9baf01e43e3d

    • SSDEEP

      12288:8y90SAgLHtmU2ptJ/Pxug6iJ4y/n0l//28mQWnvyYU:8yFxJ2ptJ/PxugnUX285WnvyYU

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks