Overview

overview

10

Static

static

3

d53fdcca9c...7d.exe

windows7-x64

10

d53fdcca9c...7d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d53fdcca9c500e9f2b52ff3b2dd1321c16ae7107a44957f217be4c1ee7b5577d.bin

  • Size

    642KB

  • Sample

    230505-ykngnacg5s

  • MD5

    75a39ff0be724e5a2733e8042c97017d

  • SHA1

    dd6a0e8e235fc2547de9dca0d34ae9a94df17c82

  • SHA256

    d53fdcca9c500e9f2b52ff3b2dd1321c16ae7107a44957f217be4c1ee7b5577d

  • SHA512

    6f573b1e515888a1c8fec3fbe0d91f53746f46adf25c08ff2feb2e8bc067d75984bc03753b715406770e60d275ef9a15857df0f3b7b0b04bab35e3385eb0dc4a

  • SSDEEP

    12288:qy90LJIJpys8hFFBhLe6qr6qjRcbSuRt0ttb1BYYxnWeabIOgXq/jVyhT:qygJ+pyLhb6lrDNcAVBlWtbRZro

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      d53fdcca9c500e9f2b52ff3b2dd1321c16ae7107a44957f217be4c1ee7b5577d.bin

    • Size

      642KB

    • MD5

      75a39ff0be724e5a2733e8042c97017d

    • SHA1

      dd6a0e8e235fc2547de9dca0d34ae9a94df17c82

    • SHA256

      d53fdcca9c500e9f2b52ff3b2dd1321c16ae7107a44957f217be4c1ee7b5577d

    • SHA512

      6f573b1e515888a1c8fec3fbe0d91f53746f46adf25c08ff2feb2e8bc067d75984bc03753b715406770e60d275ef9a15857df0f3b7b0b04bab35e3385eb0dc4a

    • SSDEEP

      12288:qy90LJIJpys8hFFBhLe6qr6qjRcbSuRt0ttb1BYYxnWeabIOgXq/jVyhT:qygJ+pyLhb6lrDNcAVBlWtbRZro

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks