Overview

overview

10

Static

static

3

bc6b2c6478...16.exe

windows7-x64

10

bc6b2c6478...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc6b2c6478f7462db0ef9d954aee580e3d83ecb8da646316804a3dce11e09716.bin

  • Size

    1.0MB

  • Sample

    230505-xyydcaag6z

  • MD5

    c24465100d43503a13a1de45a091a1d8

  • SHA1

    b17c6a3cdf29dc916ef8fb82fcdeeac62b307694

  • SHA256

    bc6b2c6478f7462db0ef9d954aee580e3d83ecb8da646316804a3dce11e09716

  • SHA512

    1f036f7d03250f3903d3409c5a22a49f6f34eaf7169109198d4a359fc6fe285a071b71c228a9d0b593ed6bca5e44402486319aacd0742ba2e37b3b267a8ee42e

  • SSDEEP

    12288:Zy90pEvZe7nT2lGVKvpgz1QwWoEVTlA7DjxvU8zKHLIxdclgWG6VDbWh1h/Qu6gE:Zyhe7l1fa5spU8zEaml2CH8z/QJOu

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      bc6b2c6478f7462db0ef9d954aee580e3d83ecb8da646316804a3dce11e09716.bin

    • Size

      1.0MB

    • MD5

      c24465100d43503a13a1de45a091a1d8

    • SHA1

      b17c6a3cdf29dc916ef8fb82fcdeeac62b307694

    • SHA256

      bc6b2c6478f7462db0ef9d954aee580e3d83ecb8da646316804a3dce11e09716

    • SHA512

      1f036f7d03250f3903d3409c5a22a49f6f34eaf7169109198d4a359fc6fe285a071b71c228a9d0b593ed6bca5e44402486319aacd0742ba2e37b3b267a8ee42e

    • SSDEEP

      12288:Zy90pEvZe7nT2lGVKvpgz1QwWoEVTlA7DjxvU8zKHLIxdclgWG6VDbWh1h/Qu6gE:Zyhe7l1fa5spU8zEaml2CH8z/QJOu

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks