Overview

overview

10

Static

static

3

c17502393a...5e.exe

windows7-x64

10

c17502393a...5e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c17502393a9f5f77b008ca7b77d46eb889b0b01ffbc8368419f67b0fbc01345e.bin

  • Size

    618KB

  • Sample

    230505-x42yqahb29

  • MD5

    fbbfc72515bcc374e573cf83dda6aead

  • SHA1

    8b508f14f9771ff3d3e6061de71e4232990cd2cf

  • SHA256

    c17502393a9f5f77b008ca7b77d46eb889b0b01ffbc8368419f67b0fbc01345e

  • SHA512

    266ecf90d81776e94f6f6871347442c94e40d515024ac607b901b56f1314446a2e1a8a8170e7d930a02b15a8f00973ca913c8bc696acfb4e10d9b78af101dc5b

  • SSDEEP

    12288:Gy90Prxou5coojwCcbUe4PfeIKeRHcUNPLgy+YvI7UwcB:Gy6xou5coywJU3PGb0kY6cB

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      c17502393a9f5f77b008ca7b77d46eb889b0b01ffbc8368419f67b0fbc01345e.bin

    • Size

      618KB

    • MD5

      fbbfc72515bcc374e573cf83dda6aead

    • SHA1

      8b508f14f9771ff3d3e6061de71e4232990cd2cf

    • SHA256

      c17502393a9f5f77b008ca7b77d46eb889b0b01ffbc8368419f67b0fbc01345e

    • SHA512

      266ecf90d81776e94f6f6871347442c94e40d515024ac607b901b56f1314446a2e1a8a8170e7d930a02b15a8f00973ca913c8bc696acfb4e10d9b78af101dc5b

    • SSDEEP

      12288:Gy90Prxou5coojwCcbUe4PfeIKeRHcUNPLgy+YvI7UwcB:Gy6xou5coywJU3PGb0kY6cB

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks