Overview

overview

10

Static

static

3

6ce17c035f...87.exe

windows7-x64

10

6ce17c035f...87.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ce17c035f3dedf0f60e95a99586c2828ccbcdc9498f9abaf445de9bd7655087.bin

  • Size

    612KB

  • Sample

    230506-2b4ztseb3w

  • MD5

    6111049a26ad873703183f999708633a

  • SHA1

    e8b2184827ea1791b35666552e421bdeb43b0059

  • SHA256

    6ce17c035f3dedf0f60e95a99586c2828ccbcdc9498f9abaf445de9bd7655087

  • SHA512

    8dfc5b6553ec2b3f9e954a6d960999b2c7e2371f805057e020ab51cc17de4d42125e96f4a546030a55fe8708e7155d1070da856dcdcafba30a40d07040f3b45c

  • SSDEEP

    12288:Gy90UBsWlHAnMKTuYPRCBZw6bKWwq2yEJySvSEat:GyDBFHAnvsBZRbKTQy9C

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      6ce17c035f3dedf0f60e95a99586c2828ccbcdc9498f9abaf445de9bd7655087.bin

    • Size

      612KB

    • MD5

      6111049a26ad873703183f999708633a

    • SHA1

      e8b2184827ea1791b35666552e421bdeb43b0059

    • SHA256

      6ce17c035f3dedf0f60e95a99586c2828ccbcdc9498f9abaf445de9bd7655087

    • SHA512

      8dfc5b6553ec2b3f9e954a6d960999b2c7e2371f805057e020ab51cc17de4d42125e96f4a546030a55fe8708e7155d1070da856dcdcafba30a40d07040f3b45c

    • SSDEEP

      12288:Gy90UBsWlHAnMKTuYPRCBZw6bKWwq2yEJySvSEat:GyDBFHAnvsBZRbKTQy9C

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks