Overview

overview

10

Static

static

3

e9ae047667...fa.exe

windows7-x64

10

e9ae047667...fa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e9ae047667d24e1a249339fc6ceed210b118523289ae269e662ddbc1cbd910fa.bin

  • Size

    1.2MB

  • Sample

    230505-y2rweacc97

  • MD5

    49fadaaf0e2525eb24a136b39e619daa

  • SHA1

    5cdb4f3e3b586324b54683aab4ff54c80b8f0632

  • SHA256

    e9ae047667d24e1a249339fc6ceed210b118523289ae269e662ddbc1cbd910fa

  • SHA512

    5f01dacf6821cc09215e823bbdb51ec3e4b69b9a071af3fd15643db9db56f967970a30c42af014c08d2f8b5677d94d2cdd7becef78c6d18664faee2b1a644ce4

  • SSDEEP

    24576:qCbht9y/vN4jFVkUI4Hiew2ltipvLt87VLLLVxCwaUdw578ObN/4SYrnP4uO:qCz9uyy4Hrw2lt2CxxCwbdw57fQSG

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      e9ae047667d24e1a249339fc6ceed210b118523289ae269e662ddbc1cbd910fa.bin

    • Size

      1.2MB

    • MD5

      49fadaaf0e2525eb24a136b39e619daa

    • SHA1

      5cdb4f3e3b586324b54683aab4ff54c80b8f0632

    • SHA256

      e9ae047667d24e1a249339fc6ceed210b118523289ae269e662ddbc1cbd910fa

    • SHA512

      5f01dacf6821cc09215e823bbdb51ec3e4b69b9a071af3fd15643db9db56f967970a30c42af014c08d2f8b5677d94d2cdd7becef78c6d18664faee2b1a644ce4

    • SSDEEP

      24576:qCbht9y/vN4jFVkUI4Hiew2ltipvLt87VLLLVxCwaUdw578ObN/4SYrnP4uO:qCz9uyy4Hrw2lt2CxxCwbdw57fQSG

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks