Overview

overview

10

Static

static

3

69bdd57722...96.exe

windows7-x64

10

69bdd57722...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69bdd577228cf7132a3e7c20e9ebe34eb9a52c1428cbb67f40e63b1c082b6196.bin

  • Size

    1.2MB

  • Sample

    230506-194ahsdg81

  • MD5

    46e3ced24afd5c6e63484f5ec722a5cf

  • SHA1

    fccc8dabb783773fdbaafb24ff133a49f4c75324

  • SHA256

    69bdd577228cf7132a3e7c20e9ebe34eb9a52c1428cbb67f40e63b1c082b6196

  • SHA512

    e6752bd04067f8158f11645e27809b4e9738bde46925eee95f50bf84c5f6a4e9abc63d3924e6d117a770c5dda46937d71524393700e9c501a6fd530765f2bcc1

  • SSDEEP

    24576:0VQCVvyI/k4Zf9YMGp77zdd0ZKUNk9e0KUDsM1dpkJNK35m:0Vtvhk499YMGVzddAge0KUDsiyNK

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      69bdd577228cf7132a3e7c20e9ebe34eb9a52c1428cbb67f40e63b1c082b6196.bin

    • Size

      1.2MB

    • MD5

      46e3ced24afd5c6e63484f5ec722a5cf

    • SHA1

      fccc8dabb783773fdbaafb24ff133a49f4c75324

    • SHA256

      69bdd577228cf7132a3e7c20e9ebe34eb9a52c1428cbb67f40e63b1c082b6196

    • SHA512

      e6752bd04067f8158f11645e27809b4e9738bde46925eee95f50bf84c5f6a4e9abc63d3924e6d117a770c5dda46937d71524393700e9c501a6fd530765f2bcc1

    • SSDEEP

      24576:0VQCVvyI/k4Zf9YMGp77zdd0ZKUNk9e0KUDsM1dpkJNK35m:0Vtvhk499YMGVzddAge0KUDsiyNK

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks