Overview

overview

10

Static

static

3

9e5c008388...c7.exe

windows7-x64

10

9e5c008388...c7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9e5c008388257b5297500964027ab82831de2bd6813c043beb37cad6a7a77cc7.bin

  • Size

    694KB

  • Sample

    230505-xcj9lage41

  • MD5

    b4d29e743e161b032f9dde29bac8398d

  • SHA1

    09d1c26e002bbce229efbcffdc2216ccb6237428

  • SHA256

    9e5c008388257b5297500964027ab82831de2bd6813c043beb37cad6a7a77cc7

  • SHA512

    622e1db0aec6391c6927cb2d250fa46554ee044990cafa789202e0caaed026bb3d1b9617b79b439cbf35f84e578c6aad2e03e9acbde605c7215611c9a616bbec

  • SSDEEP

    12288:Ky90jZ/FFW4jUsoxP4UA/fMBRD3nmlIAEz7wjKfToQLa3VHDE:KycZ/Fg4jWWZfMBRiOAs79YtA

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      9e5c008388257b5297500964027ab82831de2bd6813c043beb37cad6a7a77cc7.bin

    • Size

      694KB

    • MD5

      b4d29e743e161b032f9dde29bac8398d

    • SHA1

      09d1c26e002bbce229efbcffdc2216ccb6237428

    • SHA256

      9e5c008388257b5297500964027ab82831de2bd6813c043beb37cad6a7a77cc7

    • SHA512

      622e1db0aec6391c6927cb2d250fa46554ee044990cafa789202e0caaed026bb3d1b9617b79b439cbf35f84e578c6aad2e03e9acbde605c7215611c9a616bbec

    • SSDEEP

      12288:Ky90jZ/FFW4jUsoxP4UA/fMBRD3nmlIAEz7wjKfToQLa3VHDE:KycZ/Fg4jWWZfMBRiOAs79YtA

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks