Overview

overview

10

Static

static

3

562c4441e9...d6.exe

windows7-x64

10

562c4441e9...d6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    562c4441e90731af22387a1d89398cea2075ca16970f23edc31f53dfad79b1d6.bin

  • Size

    1.2MB

  • Sample

    230506-1wp6qscb4v

  • MD5

    25ce11fad0c0f61d121526cc23e28ccf

  • SHA1

    4d5bdd574f192754219a668b6d388c60bd94f339

  • SHA256

    562c4441e90731af22387a1d89398cea2075ca16970f23edc31f53dfad79b1d6

  • SHA512

    c8a808768a56d6536e01b24f31484507b6f1fb872a201e60c540ba84aa16a745a1d87561a065c2731ce6dfaa54c117e9d4cabc7347da8f201fc570574c669277

  • SSDEEP

    24576:DcfsVIKzRLTr3vkFjAacR3lMERO6s0fYK++YSYuugo4cyC/:Dc+I8X8FjAacEER9NYK+lngo4cyC

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      562c4441e90731af22387a1d89398cea2075ca16970f23edc31f53dfad79b1d6.bin

    • Size

      1.2MB

    • MD5

      25ce11fad0c0f61d121526cc23e28ccf

    • SHA1

      4d5bdd574f192754219a668b6d388c60bd94f339

    • SHA256

      562c4441e90731af22387a1d89398cea2075ca16970f23edc31f53dfad79b1d6

    • SHA512

      c8a808768a56d6536e01b24f31484507b6f1fb872a201e60c540ba84aa16a745a1d87561a065c2731ce6dfaa54c117e9d4cabc7347da8f201fc570574c669277

    • SSDEEP

      24576:DcfsVIKzRLTr3vkFjAacR3lMERO6s0fYK++YSYuugo4cyC/:Dc+I8X8FjAacEER9NYK+lngo4cyC

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks