Overview

overview

10

Static

static

3

0c856bc151...02.exe

windows7-x64

10

0c856bc151...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c856bc151f53b3820a5abfe6930fdf0dd51bfacfdf2e0d8e3dd20a81d0a8602.bin

  • Size

    747KB

  • Sample

    230506-y76azsbf28

  • MD5

    62bc21d38cb8d88dfbb6fe0b75996112

  • SHA1

    a1ba0d14f3a99126ff5fb3b03c240045c2fa2530

  • SHA256

    0c856bc151f53b3820a5abfe6930fdf0dd51bfacfdf2e0d8e3dd20a81d0a8602

  • SHA512

    e955310da1432294e573e97b52d801f1e572bbd0618e0d0c56bf6aa7084c6627397b65a2bd1cd3895beaca51ae30a3af178d8a2bc0f20ef2aee62cbb31561bfc

  • SSDEEP

    12288:Oy90D2l0aLw2muR5et/rZIzraNV9SZks15JMhMO9pOBtGW5+PbnmYsqnoSk3:Oy62l0O1N7eRrZI+NV9gkkTCGGWoPKL/

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      0c856bc151f53b3820a5abfe6930fdf0dd51bfacfdf2e0d8e3dd20a81d0a8602.bin

    • Size

      747KB

    • MD5

      62bc21d38cb8d88dfbb6fe0b75996112

    • SHA1

      a1ba0d14f3a99126ff5fb3b03c240045c2fa2530

    • SHA256

      0c856bc151f53b3820a5abfe6930fdf0dd51bfacfdf2e0d8e3dd20a81d0a8602

    • SHA512

      e955310da1432294e573e97b52d801f1e572bbd0618e0d0c56bf6aa7084c6627397b65a2bd1cd3895beaca51ae30a3af178d8a2bc0f20ef2aee62cbb31561bfc

    • SSDEEP

      12288:Oy90D2l0aLw2muR5et/rZIzraNV9SZks15JMhMO9pOBtGW5+PbnmYsqnoSk3:Oy62l0O1N7eRrZI+NV9gkkTCGGWoPKL/

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks