Overview

overview

10

Static

static

3

ed9976c582...7e.exe

windows7-x64

10

ed9976c582...7e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ed9976c5822ebfae56cfdfd8fd062b6455fed3f6fe1a61c7b2978767aa8d357e.bin

  • Size

    612KB

  • Sample

    230505-y5xk3aeg6y

  • MD5

    33375b11b6c19cf5035701556e2abebf

  • SHA1

    fe7854f5fa3d79946e158e859c88a43942168c8b

  • SHA256

    ed9976c5822ebfae56cfdfd8fd062b6455fed3f6fe1a61c7b2978767aa8d357e

  • SHA512

    eabdb5d7f2805462f833278f67bc43b35d6eec3c91f5c5961e91b655249d22e5912744a4a14ccbf3d8ae6d4aafeaa5ad79e99eeb4b8e416b91546172e90743f3

  • SSDEEP

    6144:96p0yN90QER2DraRdKvQ53Tj6XyNZe/CTNXNY69m4LH2eQFOaIIYPnbH+0d+SrVF:By90jqeR6+yXA4KjDciZdr258nhx5rL

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      ed9976c5822ebfae56cfdfd8fd062b6455fed3f6fe1a61c7b2978767aa8d357e.bin

    • Size

      612KB

    • MD5

      33375b11b6c19cf5035701556e2abebf

    • SHA1

      fe7854f5fa3d79946e158e859c88a43942168c8b

    • SHA256

      ed9976c5822ebfae56cfdfd8fd062b6455fed3f6fe1a61c7b2978767aa8d357e

    • SHA512

      eabdb5d7f2805462f833278f67bc43b35d6eec3c91f5c5961e91b655249d22e5912744a4a14ccbf3d8ae6d4aafeaa5ad79e99eeb4b8e416b91546172e90743f3

    • SSDEEP

      6144:96p0yN90QER2DraRdKvQ53Tj6XyNZe/CTNXNY69m4LH2eQFOaIIYPnbH+0d+SrVF:By90jqeR6+yXA4KjDciZdr258nhx5rL

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks