Overview

overview

10

Static

static

3

d167832211...53.exe

windows7-x64

10

d167832211...53.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d167832211109205969ba2a2a353006ed6638d63891633c7b0f540312dc08653.bin

  • Size

    704KB

  • Sample

    230505-yhc8xace2z

  • MD5

    50488eb45e7e5af0aa57bc1ecbd85859

  • SHA1

    5e4e7b29e159d986caeca3675aa4621371785db6

  • SHA256

    d167832211109205969ba2a2a353006ed6638d63891633c7b0f540312dc08653

  • SHA512

    1694dcf6aa402e99e81ecbb06b424356276af798f834818cd0494b2f0cd7ae94d530a6050eea7a9c8762825b95a9b2f7ff3f0ce3643280fbcec621ad9d340623

  • SSDEEP

    12288:Ly90Yv/MW4VbNmR8CXCrI19vZqopAW4I1NzCK/Iz/MC4/KlgUhMZ:Ly1v/MRfmR8XI17qi1L/Ir1VgUhO

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      d167832211109205969ba2a2a353006ed6638d63891633c7b0f540312dc08653.bin

    • Size

      704KB

    • MD5

      50488eb45e7e5af0aa57bc1ecbd85859

    • SHA1

      5e4e7b29e159d986caeca3675aa4621371785db6

    • SHA256

      d167832211109205969ba2a2a353006ed6638d63891633c7b0f540312dc08653

    • SHA512

      1694dcf6aa402e99e81ecbb06b424356276af798f834818cd0494b2f0cd7ae94d530a6050eea7a9c8762825b95a9b2f7ff3f0ce3643280fbcec621ad9d340623

    • SSDEEP

      12288:Ly90Yv/MW4VbNmR8CXCrI19vZqopAW4I1NzCK/Iz/MC4/KlgUhMZ:Ly1v/MRfmR8XI17qi1L/Ir1VgUhO

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks