Overview

overview

10

Static

static

3

f6b15c33af...f7.exe

windows7-x64

10

f6b15c33af...f7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f6b15c33af9ed902fbda57cfe9f57a6dc3516cf90ec0581eefb4cc9c5f4cc6f7.bin

  • Size

    690KB

  • Sample

    230505-za9gtafe4s

  • MD5

    84db0a067390a799b0a47ccbead36b2f

  • SHA1

    d00f081af580a93e3436b38db40ce2e441c935cc

  • SHA256

    f6b15c33af9ed902fbda57cfe9f57a6dc3516cf90ec0581eefb4cc9c5f4cc6f7

  • SHA512

    1b81f85f3d0b358bd6a3e5bcecb37fe1a92e2f05a7548f0ecfbc63c6487c34def827e9d92345f787d1aa0653aa4df46d38445adfccec08b06a10bfaf28633dd4

  • SSDEEP

    12288:Dy90irfgA3nj864PDVxnQkLVUFx9DC70O+I2sm/wJwsYSX0UP:DyvrfgA347P8a6x54T2sWwp

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      f6b15c33af9ed902fbda57cfe9f57a6dc3516cf90ec0581eefb4cc9c5f4cc6f7.bin

    • Size

      690KB

    • MD5

      84db0a067390a799b0a47ccbead36b2f

    • SHA1

      d00f081af580a93e3436b38db40ce2e441c935cc

    • SHA256

      f6b15c33af9ed902fbda57cfe9f57a6dc3516cf90ec0581eefb4cc9c5f4cc6f7

    • SHA512

      1b81f85f3d0b358bd6a3e5bcecb37fe1a92e2f05a7548f0ecfbc63c6487c34def827e9d92345f787d1aa0653aa4df46d38445adfccec08b06a10bfaf28633dd4

    • SSDEEP

      12288:Dy90irfgA3nj864PDVxnQkLVUFx9DC70O+I2sm/wJwsYSX0UP:DyvrfgA347P8a6x54T2sWwp

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks