Overview

overview

10

Static

static

3

fa5d18899c...dc.exe

windows7-x64

10

fa5d18899c...dc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa5d18899c7e01709b1e3c77ba674bb9afd04224eee31aefb5fa520cf44740dc.bin

  • Size

    745KB

  • Sample

    230505-zc7q1afg5y

  • MD5

    e2eab84ffeb179c14f697d6d6daa8157

  • SHA1

    6580b67d0062c8bfae23c765d9cfcff77fabdd4c

  • SHA256

    fa5d18899c7e01709b1e3c77ba674bb9afd04224eee31aefb5fa520cf44740dc

  • SHA512

    fc4f90b1c1c55f88f9616141bd71fe51aa83a5f7bf96da5c744a589cf0d889164232ab89a81f4af65c795105c3784c6a4174d0c9abba74168a4d6d5304f9cd34

  • SSDEEP

    12288:by90hdBTVKFEeAkHfDbQePJzrX3TXXfSGUgaYnx7DCeM:byodBTEFEhSD8cvTXXfCgaYnx7DCeM

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      fa5d18899c7e01709b1e3c77ba674bb9afd04224eee31aefb5fa520cf44740dc.bin

    • Size

      745KB

    • MD5

      e2eab84ffeb179c14f697d6d6daa8157

    • SHA1

      6580b67d0062c8bfae23c765d9cfcff77fabdd4c

    • SHA256

      fa5d18899c7e01709b1e3c77ba674bb9afd04224eee31aefb5fa520cf44740dc

    • SHA512

      fc4f90b1c1c55f88f9616141bd71fe51aa83a5f7bf96da5c744a589cf0d889164232ab89a81f4af65c795105c3784c6a4174d0c9abba74168a4d6d5304f9cd34

    • SSDEEP

      12288:by90hdBTVKFEeAkHfDbQePJzrX3TXXfSGUgaYnx7DCeM:byodBTEFEhSD8cvTXXfCgaYnx7DCeM

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks