Overview

overview

10

Static

static

3

6745f0b27d...ba.exe

windows7-x64

10

6745f0b27d...ba.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6745f0b27d5b5c32f75d32ab0d7dd41ed29925421cf5f89b7d9f19414742d1ba.bin

  • Size

    611KB

  • Sample

    230506-18fg3adf2y

  • MD5

    c6ab7ee1714f460f6556547a59300352

  • SHA1

    e7e53b82e5df905d50618699fa9f77638732302c

  • SHA256

    6745f0b27d5b5c32f75d32ab0d7dd41ed29925421cf5f89b7d9f19414742d1ba

  • SHA512

    382b276079ca1bae0b137aa226c50d777cd8a34d34246688d74aa1e88a39a20e385941e63d7c8a4516f97a2a265b11889fa6743296b7321738525ce5f6e574e3

  • SSDEEP

    12288:+y90K2muAD4hhbdeZI2YM2uVRfRd8SYvkgxYmif5ibLTqS2:+y+muNzde+mHHYkgx1o5gn2

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      6745f0b27d5b5c32f75d32ab0d7dd41ed29925421cf5f89b7d9f19414742d1ba.bin

    • Size

      611KB

    • MD5

      c6ab7ee1714f460f6556547a59300352

    • SHA1

      e7e53b82e5df905d50618699fa9f77638732302c

    • SHA256

      6745f0b27d5b5c32f75d32ab0d7dd41ed29925421cf5f89b7d9f19414742d1ba

    • SHA512

      382b276079ca1bae0b137aa226c50d777cd8a34d34246688d74aa1e88a39a20e385941e63d7c8a4516f97a2a265b11889fa6743296b7321738525ce5f6e574e3

    • SSDEEP

      12288:+y90K2muAD4hhbdeZI2YM2uVRfRd8SYvkgxYmif5ibLTqS2:+y+muNzde+mHHYkgx1o5gn2

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks