Overview

overview

10

Static

static

3

436b7c5882...df.exe

windows7-x64

10

436b7c5882...df.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    436b7c58821bd0e30ba1a9ffb0c87946280e61340b6b837985b8bbcd5419f1df.bin

  • Size

    704KB

  • Sample

    230506-1fxwmsgf45

  • MD5

    c18320aee784ea07a6dce8ae2fdce5c1

  • SHA1

    49c2fb1f129d377c7b774b2fa3dd8d5e99cfa939

  • SHA256

    436b7c58821bd0e30ba1a9ffb0c87946280e61340b6b837985b8bbcd5419f1df

  • SHA512

    97163d698fa5013006e7f3593e5b4e09e409778218631616f8554dc72b5b783478060b99cadcfd03c7567b2a3a2ffaf75ef14dc4a3a54b9600f690ab387fa662

  • SSDEEP

    12288:fy90gfeRw3ZvxRX8ps2H06rIsVhwq13AuI15zC+LIzjM1C/nVM8I4IguO:fy9feW3ZZRX8morIkKU3AHBfLIfS016O

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      436b7c58821bd0e30ba1a9ffb0c87946280e61340b6b837985b8bbcd5419f1df.bin

    • Size

      704KB

    • MD5

      c18320aee784ea07a6dce8ae2fdce5c1

    • SHA1

      49c2fb1f129d377c7b774b2fa3dd8d5e99cfa939

    • SHA256

      436b7c58821bd0e30ba1a9ffb0c87946280e61340b6b837985b8bbcd5419f1df

    • SHA512

      97163d698fa5013006e7f3593e5b4e09e409778218631616f8554dc72b5b783478060b99cadcfd03c7567b2a3a2ffaf75ef14dc4a3a54b9600f690ab387fa662

    • SSDEEP

      12288:fy90gfeRw3ZvxRX8ps2H06rIsVhwq13AuI15zC+LIzjM1C/nVM8I4IguO:fy9feW3ZZRX8morIkKU3AHBfLIfS016O

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks