Overview

overview

10

Static

static

3

f8b710fd89...1a.exe

windows7-x64

10

f8b710fd89...1a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f8b710fd89739236ff2b961d47b738df7ac02f9f47e2b20247656acbda2fae1a.bin

  • Size

    694KB

  • Sample

    230501-x3lv4sfe69

  • MD5

    3f92a310c625725ac14eede0651791ce

  • SHA1

    1a1ae6715f2bce5a2dd6236bd80b4614ff6645d7

  • SHA256

    f8b710fd89739236ff2b961d47b738df7ac02f9f47e2b20247656acbda2fae1a

  • SHA512

    f9a75a89c8e7182ef07392fcb8cc677317754a9456e080927bb7b24b7d2af64fa9f579e6f30c84fca618261138e52abad807dc8a650ce63bb5109c52a82754c6

  • SSDEEP

    12288:Qy90pEPoPLLYhdxCmRM6eHwpFTK0gF8Lbc7Sd+1WK6FL18bZK6A+M9p9:QysFLYkKM1oFXgFH4y6FL18bZ5i9X

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      f8b710fd89739236ff2b961d47b738df7ac02f9f47e2b20247656acbda2fae1a.bin

    • Size

      694KB

    • MD5

      3f92a310c625725ac14eede0651791ce

    • SHA1

      1a1ae6715f2bce5a2dd6236bd80b4614ff6645d7

    • SHA256

      f8b710fd89739236ff2b961d47b738df7ac02f9f47e2b20247656acbda2fae1a

    • SHA512

      f9a75a89c8e7182ef07392fcb8cc677317754a9456e080927bb7b24b7d2af64fa9f579e6f30c84fca618261138e52abad807dc8a650ce63bb5109c52a82754c6

    • SSDEEP

      12288:Qy90pEPoPLLYhdxCmRM6eHwpFTK0gF8Lbc7Sd+1WK6FL18bZK6A+M9p9:QysFLYkKM1oFXgFH4y6FL18bZ5i9X

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks