Overview

overview

10

Static

static

3

636c976830...99.exe

windows7-x64

10

636c976830...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    636c9768303beb0f3fa52b9b31b5edb581e6bebf224d9ca0b1fa888ec1ac1099.bin

  • Size

    673KB

  • Sample

    230506-15y51adc4z

  • MD5

    cbc430d7533eab35d40b4e11ebca0304

  • SHA1

    e4c7c47d0c66ef140adeb942138aeb81a8a6fc6a

  • SHA256

    636c9768303beb0f3fa52b9b31b5edb581e6bebf224d9ca0b1fa888ec1ac1099

  • SHA512

    1fd90c143d7ce12e9a97e21cfa87a7cb7bf12e89758d905bc66707c418e57758c8eb072b65be1e0a242fc36b901f6c96618d192969d422f6ea9d24f092657f4d

  • SSDEEP

    12288:Ny90g92W4igxjLtJ29onJ4nZWuZkjmuR61axn/PWpXa4M:NyV25ntJKonaZLZyZUDan

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      636c9768303beb0f3fa52b9b31b5edb581e6bebf224d9ca0b1fa888ec1ac1099.bin

    • Size

      673KB

    • MD5

      cbc430d7533eab35d40b4e11ebca0304

    • SHA1

      e4c7c47d0c66ef140adeb942138aeb81a8a6fc6a

    • SHA256

      636c9768303beb0f3fa52b9b31b5edb581e6bebf224d9ca0b1fa888ec1ac1099

    • SHA512

      1fd90c143d7ce12e9a97e21cfa87a7cb7bf12e89758d905bc66707c418e57758c8eb072b65be1e0a242fc36b901f6c96618d192969d422f6ea9d24f092657f4d

    • SSDEEP

      12288:Ny90g92W4igxjLtJ29onJ4nZWuZkjmuR61axn/PWpXa4M:NyV25ntJKonaZLZyZUDan

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks