Overview

overview

10

Static

static

3

5fdfc2318e...e5.exe

windows7-x64

10

5fdfc2318e...e5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fdfc2318eb5a1acf09625554d18438427a4cf7cca5cc5cfe54d95ada25678e5.bin

  • Size

    695KB

  • Sample

    230506-13h11ach7y

  • MD5

    871dda3022b305b2d44cb533162847f6

  • SHA1

    81d56b0950eca794ae9f69c6b0b3eb8be9f9531e

  • SHA256

    5fdfc2318eb5a1acf09625554d18438427a4cf7cca5cc5cfe54d95ada25678e5

  • SHA512

    464949d813518759262c60eb7b6990a2938f8da9ad2497d7314502dc5109e4b2b90c977e13174cb2ccc665dfbc4033f4b4eb73136beabc82e3c9d17ddc4327cb

  • SSDEEP

    12288:+y9053R5DYv9z9AdXwg/mb/+tZ9COlyIzWKgmg8yC0sWQ6ry18bxK9A+T1JM/cN1:+yc5AA9gb/+tXCPagtW6ry18bxKR1JF3

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      5fdfc2318eb5a1acf09625554d18438427a4cf7cca5cc5cfe54d95ada25678e5.bin

    • Size

      695KB

    • MD5

      871dda3022b305b2d44cb533162847f6

    • SHA1

      81d56b0950eca794ae9f69c6b0b3eb8be9f9531e

    • SHA256

      5fdfc2318eb5a1acf09625554d18438427a4cf7cca5cc5cfe54d95ada25678e5

    • SHA512

      464949d813518759262c60eb7b6990a2938f8da9ad2497d7314502dc5109e4b2b90c977e13174cb2ccc665dfbc4033f4b4eb73136beabc82e3c9d17ddc4327cb

    • SSDEEP

      12288:+y9053R5DYv9z9AdXwg/mb/+tZ9COlyIzWKgmg8yC0sWQ6ry18bxK9A+T1JM/cN1:+yc5AA9gb/+tXCPagtW6ry18bxKR1JF3

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks