Overview

overview

10

Static

static

3

64a6567004...e6.exe

windows7-x64

10

64a6567004...e6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    64a6567004369813944dfda8b564ddbe7f89208be4456aaae4e7176bb7f9d2e6.bin

  • Size

    727KB

  • Sample

    230506-16s1dabe96

  • MD5

    c6314b5cd040daf5231ac25bfecbcec9

  • SHA1

    6486de20c175b294e2e3d56fb9d95080018755cf

  • SHA256

    64a6567004369813944dfda8b564ddbe7f89208be4456aaae4e7176bb7f9d2e6

  • SHA512

    5726da80ac576e464fd3b3fe6192bdeeeb888c6ea9f0638a8b53ca69884652b24bf0dd436ca531fa5654925cec62f0e83155faf10805550323749c17d1b70497

  • SSDEEP

    12288:ky90w7ew7KwqaAOESmhtvK8kL9ySEcEkjAKBV80w+oQVGf0J2zQhY:kyvew2wqaJHGK/L9s3kjAKrw100EG

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      64a6567004369813944dfda8b564ddbe7f89208be4456aaae4e7176bb7f9d2e6.bin

    • Size

      727KB

    • MD5

      c6314b5cd040daf5231ac25bfecbcec9

    • SHA1

      6486de20c175b294e2e3d56fb9d95080018755cf

    • SHA256

      64a6567004369813944dfda8b564ddbe7f89208be4456aaae4e7176bb7f9d2e6

    • SHA512

      5726da80ac576e464fd3b3fe6192bdeeeb888c6ea9f0638a8b53ca69884652b24bf0dd436ca531fa5654925cec62f0e83155faf10805550323749c17d1b70497

    • SSDEEP

      12288:ky90w7ew7KwqaAOESmhtvK8kL9ySEcEkjAKBV80w+oQVGf0J2zQhY:kyvew2wqaJHGK/L9s3kjAKrw100EG

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks