Overview

overview

10

Static

static

3

e484dd4250...03.exe

windows7-x64

10

e484dd4250...03.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e484dd4250fc63207a05cf58bbb9c39b94f38699a8c225e69e8dde6b7048a303.bin

  • Size

    651KB

  • Sample

    230501-xjxs9sec53

  • MD5

    0ab27ab7149e9be3b2e09a41295772b9

  • SHA1

    15f5ada8205d32c1b12a869366be46ed74597463

  • SHA256

    e484dd4250fc63207a05cf58bbb9c39b94f38699a8c225e69e8dde6b7048a303

  • SHA512

    d761fc2bdb1e3810c16f97ab8bc687bca8d9e1a923d3a0983913b2a9d25fa93b12acb91b6214a7b3082652adeef8b31f066b3be68e6a375dad794a672aad5026

  • SSDEEP

    12288:My905PqL8TjaotJOPfv6aTgJPOeDD0Zxn2VmQznn/R8G+ItZa:MyiK8SotJOP36ZhQ92V5znn58G+ItZa

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      e484dd4250fc63207a05cf58bbb9c39b94f38699a8c225e69e8dde6b7048a303.bin

    • Size

      651KB

    • MD5

      0ab27ab7149e9be3b2e09a41295772b9

    • SHA1

      15f5ada8205d32c1b12a869366be46ed74597463

    • SHA256

      e484dd4250fc63207a05cf58bbb9c39b94f38699a8c225e69e8dde6b7048a303

    • SHA512

      d761fc2bdb1e3810c16f97ab8bc687bca8d9e1a923d3a0983913b2a9d25fa93b12acb91b6214a7b3082652adeef8b31f066b3be68e6a375dad794a672aad5026

    • SSDEEP

      12288:My905PqL8TjaotJOPfv6aTgJPOeDD0Zxn2VmQznn/R8G+ItZa:MyiK8SotJOP36ZhQ92V5znn58G+ItZa

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks