Overview

overview

10

Static

static

3

e9a9f5900e...92.exe

windows7-x64

10

e9a9f5900e...92.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e9a9f5900e3db922068e24197e4fe4462c1df8ff184bc662bc4eedc846383192.bin

  • Size

    694KB

  • Sample

    230501-xmr27agd4x

  • MD5

    350833d78e9db8d00bdfa6761a37b3fc

  • SHA1

    6028a30702af762ba2eac5a09e082b6b4769dbdd

  • SHA256

    e9a9f5900e3db922068e24197e4fe4462c1df8ff184bc662bc4eedc846383192

  • SHA512

    fb17351992022e8f50ab15185591c78d4d3b3942adb776a6f087aaff55dcea1322895fba7d7456db94cc15215c85f71cd68ebcd9520cd83d91b0000de7ca0667

  • SSDEEP

    12288:ly90z+lRbd1CkIzfNnTiRqlniqVdUN0cR/bP5zBjPJBWWrh:lyqwWkMfNWRqlRdUeYbRBTh

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      e9a9f5900e3db922068e24197e4fe4462c1df8ff184bc662bc4eedc846383192.bin

    • Size

      694KB

    • MD5

      350833d78e9db8d00bdfa6761a37b3fc

    • SHA1

      6028a30702af762ba2eac5a09e082b6b4769dbdd

    • SHA256

      e9a9f5900e3db922068e24197e4fe4462c1df8ff184bc662bc4eedc846383192

    • SHA512

      fb17351992022e8f50ab15185591c78d4d3b3942adb776a6f087aaff55dcea1322895fba7d7456db94cc15215c85f71cd68ebcd9520cd83d91b0000de7ca0667

    • SSDEEP

      12288:ly90z+lRbd1CkIzfNnTiRqlniqVdUN0cR/bP5zBjPJBWWrh:lyqwWkMfNWRqlRdUeYbRBTh

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks