Overview

overview

10

Static

static

3

2b4de69fd2...75.exe

windows7-x64

10

2b4de69fd2...75.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b4de69fd2d845cbf9bcc5a01b9db344ce88c0a4da622f351a0c583f70558d75.bin

  • Size

    618KB

  • Sample

    230506-zyebksee69

  • MD5

    aecd19e05454be9bd31d6bd835db72e6

  • SHA1

    14cc69aaca52090097effa008a2b22bbc900d309

  • SHA256

    2b4de69fd2d845cbf9bcc5a01b9db344ce88c0a4da622f351a0c583f70558d75

  • SHA512

    8361c9ab554914acea8d9b1bb5293453e6a160933831650f916b29ad95bb4de3ba9584ed64e7dcb009b1616f0d78f1685651b5154055dcc91c2c9dd5a36d3985

  • SSDEEP

    12288:vy90Szn+AzTQWIbWsEAxlRb0jx0hsVkqd2FkAK5Cp:vylzn+AXQWlrATE2hsVkqd2Rlp

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      2b4de69fd2d845cbf9bcc5a01b9db344ce88c0a4da622f351a0c583f70558d75.bin

    • Size

      618KB

    • MD5

      aecd19e05454be9bd31d6bd835db72e6

    • SHA1

      14cc69aaca52090097effa008a2b22bbc900d309

    • SHA256

      2b4de69fd2d845cbf9bcc5a01b9db344ce88c0a4da622f351a0c583f70558d75

    • SHA512

      8361c9ab554914acea8d9b1bb5293453e6a160933831650f916b29ad95bb4de3ba9584ed64e7dcb009b1616f0d78f1685651b5154055dcc91c2c9dd5a36d3985

    • SSDEEP

      12288:vy90Szn+AzTQWIbWsEAxlRb0jx0hsVkqd2FkAK5Cp:vylzn+AXQWlrATE2hsVkqd2Rlp

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks