Overview

overview

10

Static

static

3

1182c724ec...63.exe

windows7-x64

10

1182c724ec...63.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1182c724ec015e8b2ddb10dd2ac4e72dfff32d080c3e22761d417a49e6b5bc63.bin

  • Size

    746KB

  • Sample

    230506-zb17tsed2x

  • MD5

    0d98e5ca9709feca7d2da824ddd65e24

  • SHA1

    01fa5e5ac8d62cfcff0427c9d39706e77b7abfd2

  • SHA256

    1182c724ec015e8b2ddb10dd2ac4e72dfff32d080c3e22761d417a49e6b5bc63

  • SHA512

    5335fe92acac63ecfcb693d38e263fded07654f1261ca40b33f3288633b34b2d7c22f8170ffd602898a6f8bd30ee3685d5781d5b57b9d0a4a80993424152ea81

  • SSDEEP

    12288:jy90JuKYsaNssWHFYsbkWpD3J7/LMN0ErP55nA5xoWDVt+:jyUuTsEssijbkWl57gNzPcGsk

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      1182c724ec015e8b2ddb10dd2ac4e72dfff32d080c3e22761d417a49e6b5bc63.bin

    • Size

      746KB

    • MD5

      0d98e5ca9709feca7d2da824ddd65e24

    • SHA1

      01fa5e5ac8d62cfcff0427c9d39706e77b7abfd2

    • SHA256

      1182c724ec015e8b2ddb10dd2ac4e72dfff32d080c3e22761d417a49e6b5bc63

    • SHA512

      5335fe92acac63ecfcb693d38e263fded07654f1261ca40b33f3288633b34b2d7c22f8170ffd602898a6f8bd30ee3685d5781d5b57b9d0a4a80993424152ea81

    • SSDEEP

      12288:jy90JuKYsaNssWHFYsbkWpD3J7/LMN0ErP55nA5xoWDVt+:jyUuTsEssijbkWl57gNzPcGsk

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks