Overview

overview

10

Static

static

3

e7a6c0f054...f7.exe

windows7-x64

10

e7a6c0f054...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7a6c0f0547a43b8e6ce0d662b2b26da5ff350f69dede51fc540139f29286af7.bin

  • Size

    746KB

  • Sample

    230505-y1dbmaec5x

  • MD5

    a9ff689f1e7bb4a17e99c60c155e5492

  • SHA1

    2a11b18deb134e718f6beb697437550bbee62007

  • SHA256

    e7a6c0f0547a43b8e6ce0d662b2b26da5ff350f69dede51fc540139f29286af7

  • SHA512

    2342e7c43ef524ffa6aa26c84895796919e34ebd16ee3a2453fcdc4db3f767c5078bf251c422f9f2d01d1ae2cfb6301db90e7c274117e4a920bbedcc13498708

  • SSDEEP

    12288:Xy909xx2IsPJWj/+3d1QJxkaMyCI6enCqjBeXEp6FiQRNx8elr5zhttWC:Xywx2IK33d1QJx53hTnMXEp6FiqxfBfd

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      e7a6c0f0547a43b8e6ce0d662b2b26da5ff350f69dede51fc540139f29286af7.bin

    • Size

      746KB

    • MD5

      a9ff689f1e7bb4a17e99c60c155e5492

    • SHA1

      2a11b18deb134e718f6beb697437550bbee62007

    • SHA256

      e7a6c0f0547a43b8e6ce0d662b2b26da5ff350f69dede51fc540139f29286af7

    • SHA512

      2342e7c43ef524ffa6aa26c84895796919e34ebd16ee3a2453fcdc4db3f767c5078bf251c422f9f2d01d1ae2cfb6301db90e7c274117e4a920bbedcc13498708

    • SSDEEP

      12288:Xy909xx2IsPJWj/+3d1QJxkaMyCI6enCqjBeXEp6FiQRNx8elr5zhttWC:Xywx2IK33d1QJx53hTnMXEp6FiqxfBfd

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks