Overview

overview

10

Static

static

3

27e4f8794a...54.exe

windows7-x64

10

27e4f8794a...54.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    27e4f8794a314a7ac3f101da0e8ba14f8ee0b38948368b85aae62d05acc3a454.bin

  • Size

    747KB

  • Sample

    230506-zv9nbagc6z

  • MD5

    3cd5d2cf329bc1b94eb0732b5bc23620

  • SHA1

    8cfe85ca320953e3121a1465b8e11dc9b6204ac1

  • SHA256

    27e4f8794a314a7ac3f101da0e8ba14f8ee0b38948368b85aae62d05acc3a454

  • SHA512

    6ee29e95e444db8f1b4c0eef28f6c1b038121687771b9ec128c5816d41a5d5762d505b8035691161388b4931d1eb367615b6f7d2487fecd88b01ad0683ea2559

  • SSDEEP

    12288:Oy90ns2ZtHDoGxQ7l1QITsTsDL9fu17LuIkbeqsO6/eydKAMFV:OyXEt7KlfsTsNQ3uIK6/emKZFV

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      27e4f8794a314a7ac3f101da0e8ba14f8ee0b38948368b85aae62d05acc3a454.bin

    • Size

      747KB

    • MD5

      3cd5d2cf329bc1b94eb0732b5bc23620

    • SHA1

      8cfe85ca320953e3121a1465b8e11dc9b6204ac1

    • SHA256

      27e4f8794a314a7ac3f101da0e8ba14f8ee0b38948368b85aae62d05acc3a454

    • SHA512

      6ee29e95e444db8f1b4c0eef28f6c1b038121687771b9ec128c5816d41a5d5762d505b8035691161388b4931d1eb367615b6f7d2487fecd88b01ad0683ea2559

    • SSDEEP

      12288:Oy90ns2ZtHDoGxQ7l1QITsTsDL9fu17LuIkbeqsO6/eydKAMFV:OyXEt7KlfsTsNQ3uIK6/emKZFV

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks