Overview

overview

10

Static

static

3

6e9063c232...f7.exe

windows7-x64

7

6e9063c232...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e9063c232e393afed70f66c76209915000f185e88aba16d2e25c41c981925f7

  • Size

    479KB

  • Sample

    230506-2c1c2aec4z

  • MD5

    e21062eac23b3546632dc7a3140b8df8

  • SHA1

    1497ac3e54268ca6a3cfb8a2c55ac0d5c495ea7d

  • SHA256

    6e9063c232e393afed70f66c76209915000f185e88aba16d2e25c41c981925f7

  • SHA512

    8954f00d72d4bca7451c98f889d5caf3feea4524ba0a049504fb2e62a23dcb8dd296ab9ba7bf92a604649be56df5941954f8f8160fbba47f4666fd0bda63225b

  • SSDEEP

    12288:/MrTy90sV9Sc0m8ynVz7E8x69C1n1u5xBVX7:Uyp338Ky9n

Score
10/10
redlineinfostealerpersistencestealer

Malware Config

Targets

    • Target

      6e9063c232e393afed70f66c76209915000f185e88aba16d2e25c41c981925f7

    • Size

      479KB

    • MD5

      e21062eac23b3546632dc7a3140b8df8

    • SHA1

      1497ac3e54268ca6a3cfb8a2c55ac0d5c495ea7d

    • SHA256

      6e9063c232e393afed70f66c76209915000f185e88aba16d2e25c41c981925f7

    • SHA512

      8954f00d72d4bca7451c98f889d5caf3feea4524ba0a049504fb2e62a23dcb8dd296ab9ba7bf92a604649be56df5941954f8f8160fbba47f4666fd0bda63225b

    • SSDEEP

      12288:/MrTy90sV9Sc0m8ynVz7E8x69C1n1u5xBVX7:Uyp338Ky9n

    Score
    10/10
    persistenceredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks