Extracted

• • Target

    0x000400000001da5e-2334.dat.bin

  • Size

    169KB

  • MD5

    4ea7b47da0a32256b398856128781f82

  • SHA1

    516b534d2f17d9cd90166d57faacc9ebac03eb30

  • SHA256

    6c1aea1052431f1e043f3906997c3ad6c0d7289263d727c3d6e899e1c2215e98

  • SHA512

    5395725958bf0c7b5ca8b86e12dc0e76081ed06fe94f64a7a47ed843e11da7adac804116105114eca45a821ebb38c10736e36566c08779c9f2c563325f0dd12a

  • SSDEEP

    1536:ncJK7qlVZRGW4XqrozC3iGOmE+lrcI2nBCTGqV8buV+jys0ausT83wYk98e8he:nc4VVzxNf3qV0/yNausTb8e8he

  Score

  10^/10

  redlinelifediscoveryinfostealerspywarestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2