Overview

overview

10

Static

static

3

2c1fc0e58f...52.exe

windows7-x64

10

2c1fc0e58f...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c1fc0e58f34cb1601a5ec6aeb13454131968ac0a985aca40a1c1fcda3bda152.bin

  • Size

    618KB

  • Sample

    230506-zywkvsef43

  • MD5

    803a3fa1b3a22da0fd9b22221f1b66a9

  • SHA1

    c1b75cf865431226825ce0b8d0680a40c6d517de

  • SHA256

    2c1fc0e58f34cb1601a5ec6aeb13454131968ac0a985aca40a1c1fcda3bda152

  • SHA512

    6db8b0616753ff67686e8e7c2fe471f590b7b8da6d9290ab3bc1183670d7f7881e49f1aa40be64006340db391de085aa7701a9a6b3bc0b08a6540642c610bf2b

  • SSDEEP

    12288:/y90XaH3D6Uz3T8jgvG2GOiD65TcJ9dhsV5Bd2FIP1kED:/ygaX98EaOx4JDhsV5Bd2GP1l

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      2c1fc0e58f34cb1601a5ec6aeb13454131968ac0a985aca40a1c1fcda3bda152.bin

    • Size

      618KB

    • MD5

      803a3fa1b3a22da0fd9b22221f1b66a9

    • SHA1

      c1b75cf865431226825ce0b8d0680a40c6d517de

    • SHA256

      2c1fc0e58f34cb1601a5ec6aeb13454131968ac0a985aca40a1c1fcda3bda152

    • SHA512

      6db8b0616753ff67686e8e7c2fe471f590b7b8da6d9290ab3bc1183670d7f7881e49f1aa40be64006340db391de085aa7701a9a6b3bc0b08a6540642c610bf2b

    • SSDEEP

      12288:/y90XaH3D6Uz3T8jgvG2GOiD65TcJ9dhsV5Bd2FIP1kED:/ygaX98EaOx4JDhsV5Bd2GP1l

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks