Overview

overview

10

Static

static

3

eda95d2bab...1c.exe

windows7-x64

10

eda95d2bab...1c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eda95d2babf7dc7a7087246ca769be7cdcb8d0125e284d84c10a92eb0ea4571c.bin

  • Size

    694KB

  • Sample

    230501-xqabjsgf4y

  • MD5

    f20fa82ec5827d205028619092de9b31

  • SHA1

    55a319f1cde41f1f3363a731554e9a43b17db770

  • SHA256

    eda95d2babf7dc7a7087246ca769be7cdcb8d0125e284d84c10a92eb0ea4571c

  • SHA512

    ab954268d9e06de6a3e22ed6c65d991fdc2a5122ddb4f7c7eab68ae370606b09b79b437a44b178060e49ae8c92af740cffe134765d9d01127e039d7ae9f92bac

  • SSDEEP

    12288:yy90G6+TZl5OwGs8IOY3zEIehFTHCA5XYCsNNv/WX6FY18bzKBA+xyvU+:yyi+TZzO9a3z6FWA5ICF6FY18bzibyvb

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      eda95d2babf7dc7a7087246ca769be7cdcb8d0125e284d84c10a92eb0ea4571c.bin

    • Size

      694KB

    • MD5

      f20fa82ec5827d205028619092de9b31

    • SHA1

      55a319f1cde41f1f3363a731554e9a43b17db770

    • SHA256

      eda95d2babf7dc7a7087246ca769be7cdcb8d0125e284d84c10a92eb0ea4571c

    • SHA512

      ab954268d9e06de6a3e22ed6c65d991fdc2a5122ddb4f7c7eab68ae370606b09b79b437a44b178060e49ae8c92af740cffe134765d9d01127e039d7ae9f92bac

    • SSDEEP

      12288:yy90G6+TZl5OwGs8IOY3zEIehFTHCA5XYCsNNv/WX6FY18bzKBA+xyvU+:yyi+TZzO9a3z6FWA5ICF6FY18bzibyvb

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks