Overview

overview

10

Static

static

3

e0aae00cd1...83.exe

windows7-x64

10

e0aae00cd1...83.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0aae00cd1c9e3b182e6d56fd707151a96f21bff44b512ae4288fe47ec18e383.bin

  • Size

    695KB

  • Sample

    230501-xgrt8sfg71

  • MD5

    08d5f089173548eb1d1e57f681ed21c5

  • SHA1

    b4d29b869815818b2667241fc3f36e63207eff9b

  • SHA256

    e0aae00cd1c9e3b182e6d56fd707151a96f21bff44b512ae4288fe47ec18e383

  • SHA512

    812f8b5caa8c4a88e5e302c270279866aa3e8d68689d50a74467c1e79cc753fac3e5dfb45cb71178d16a3f9e2273f3059580e8b89509bf858fdb8b2ea3cbf1f7

  • SSDEEP

    12288:1y90nCM1eKYLKXS/VWh+ta9oORvJZwfZG49Wk6+f18buKhA+6eoxXSd16o0aGT:1yAEhKGWh+tKoY+F6+f18buWMxXSd1oT

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      e0aae00cd1c9e3b182e6d56fd707151a96f21bff44b512ae4288fe47ec18e383.bin

    • Size

      695KB

    • MD5

      08d5f089173548eb1d1e57f681ed21c5

    • SHA1

      b4d29b869815818b2667241fc3f36e63207eff9b

    • SHA256

      e0aae00cd1c9e3b182e6d56fd707151a96f21bff44b512ae4288fe47ec18e383

    • SHA512

      812f8b5caa8c4a88e5e302c270279866aa3e8d68689d50a74467c1e79cc753fac3e5dfb45cb71178d16a3f9e2273f3059580e8b89509bf858fdb8b2ea3cbf1f7

    • SSDEEP

      12288:1y90nCM1eKYLKXS/VWh+ta9oORvJZwfZG49Wk6+f18buKhA+6eoxXSd16o0aGT:1yAEhKGWh+tKoY+F6+f18buWMxXSd1oT

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks