Extracted

• • Target

    0x00010000000230fe-2341.dat.bin

  • Size

    169KB

  • MD5

    71f30bc8c72d0f177f0748fd6e725760

  • SHA1

    fab8df3825083917472e8286f5e76b9f13052ddb

  • SHA256

    6f27250b23319af12f47dc2f2d4dc01aa8dde796a02c344bb3def4c35aad0528

  • SHA512

    dc62de500a12ae62693a1e852ca7ab40af43eb7ad2c16676272b7acf5c0b125ccb666b171af461901546f3f6ad16fc3e1fc22db00aa40f6577c5f8602d1231d0

  • SSDEEP

    1536:ncJK7qlVZRGW4XqrozC3iGOmE+lrcI2nBCTGqV8buV+jys0ausT83wYk98e8he:nc4VVzxNf3qV0/yNausTb8e8he

  Score

  10^/10

  redlinelifediscoveryinfostealerspywarestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2