Overview

overview

10

Static

static

3

6c274e3816...f3.exe

windows7-x64

10

6c274e3816...f3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6c274e381653c5d679de7d8c2bc25b6de2321d134fa3acdc2a2e3361286861f3.bin

  • Size

    695KB

  • Sample

    230506-2bfx1aea6t

  • MD5

    ec5887232c4a83d112274125bb14a7bf

  • SHA1

    03317fbdec2bd72342d0a7fd7b4af31acb644766

  • SHA256

    6c274e381653c5d679de7d8c2bc25b6de2321d134fa3acdc2a2e3361286861f3

  • SHA512

    d1092cd971c45aacf5dc49bfc1d3133d5de033945d4a3cb920592933a78871d6b6833827ed8bdc77f5d98055023ae5dc151e902bd9bf1ca9a1c315d813f693ab

  • SSDEEP

    12288:/y90vEd8wELeLCb+zw4iLYhPY3IeBdO3AX2BU0rkWJ6kQ18bgKpA+lDnfu2:/yHSiGb+z2LCwX0prb6kQ18bg+vnm2

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      6c274e381653c5d679de7d8c2bc25b6de2321d134fa3acdc2a2e3361286861f3.bin

    • Size

      695KB

    • MD5

      ec5887232c4a83d112274125bb14a7bf

    • SHA1

      03317fbdec2bd72342d0a7fd7b4af31acb644766

    • SHA256

      6c274e381653c5d679de7d8c2bc25b6de2321d134fa3acdc2a2e3361286861f3

    • SHA512

      d1092cd971c45aacf5dc49bfc1d3133d5de033945d4a3cb920592933a78871d6b6833827ed8bdc77f5d98055023ae5dc151e902bd9bf1ca9a1c315d813f693ab

    • SSDEEP

      12288:/y90vEd8wELeLCb+zw4iLYhPY3IeBdO3AX2BU0rkWJ6kQ18bgKpA+lDnfu2:/yHSiGb+z2LCwX0prb6kQ18bg+vnm2

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks