Overview

overview

10

Static

static

3

e78a1fddbb...4d.exe

windows7-x64

10

e78a1fddbb...4d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e78a1fddbbd16eb332b3d02ed148ab48f669cfa9c06ec2e478ec53c5e649384d.bin

  • Size

    700KB

  • Sample

    230501-xld4yagb91

  • MD5

    a3d0840812bc4fcb001754d5bb82ef29

  • SHA1

    b8f61c5f2a2cf71331bab673e8081a5f8a028df8

  • SHA256

    e78a1fddbbd16eb332b3d02ed148ab48f669cfa9c06ec2e478ec53c5e649384d

  • SHA512

    43491fbcc817e0c8456adb2f818487f4b260edcf44905f2cc67a98d2274765669f82e3948fa2748aa2acab2fa31213c6b9174e71b6588fc95bd8f75839deffeb

  • SSDEEP

    12288:Xy90WLPpZy8XyPa+ZVweiLV1hwZwMhjEmSTqYvKmzEqDATHfbMw1wE:XyfxZ0Vb+V3wZVtkvVzm/bMw1l

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      e78a1fddbbd16eb332b3d02ed148ab48f669cfa9c06ec2e478ec53c5e649384d.bin

    • Size

      700KB

    • MD5

      a3d0840812bc4fcb001754d5bb82ef29

    • SHA1

      b8f61c5f2a2cf71331bab673e8081a5f8a028df8

    • SHA256

      e78a1fddbbd16eb332b3d02ed148ab48f669cfa9c06ec2e478ec53c5e649384d

    • SHA512

      43491fbcc817e0c8456adb2f818487f4b260edcf44905f2cc67a98d2274765669f82e3948fa2748aa2acab2fa31213c6b9174e71b6588fc95bd8f75839deffeb

    • SSDEEP

      12288:Xy90WLPpZy8XyPa+ZVweiLV1hwZwMhjEmSTqYvKmzEqDATHfbMw1wE:XyfxZ0Vb+V3wZVtkvVzm/bMw1l

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks