Overview

overview

10

Static

static

3

555c2548f2...50.exe

windows7-x64

10

555c2548f2...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    555c2548f2747ea170f1739f78993faa2cb9679ab5f7506994702065c2d42750.bin

  • Size

    617KB

  • Sample

    230506-1v63vsab99

  • MD5

    0d137f931dec213f9689aa7653ccc356

  • SHA1

    8e8d3ed73718307e884a50219e68329792646f4a

  • SHA256

    555c2548f2747ea170f1739f78993faa2cb9679ab5f7506994702065c2d42750

  • SHA512

    65c3697fb8da53065a001bfab723ac0719c8ae71689942a566eae46e519323c72621fb13d8ee7e829073f891d8510fd2e045648cccc38bc4ed530004a8826168

  • SSDEEP

    12288:my90j6toTLidRMCV6HjjKRxdcKiWMi+W4TcJ2S4L8:myrOLiXeDj2SKOi+fa2BL8

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      555c2548f2747ea170f1739f78993faa2cb9679ab5f7506994702065c2d42750.bin

    • Size

      617KB

    • MD5

      0d137f931dec213f9689aa7653ccc356

    • SHA1

      8e8d3ed73718307e884a50219e68329792646f4a

    • SHA256

      555c2548f2747ea170f1739f78993faa2cb9679ab5f7506994702065c2d42750

    • SHA512

      65c3697fb8da53065a001bfab723ac0719c8ae71689942a566eae46e519323c72621fb13d8ee7e829073f891d8510fd2e045648cccc38bc4ed530004a8826168

    • SSDEEP

      12288:my90j6toTLidRMCV6HjjKRxdcKiWMi+W4TcJ2S4L8:myrOLiXeDj2SKOi+fa2BL8

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks