General
-
Target
5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c
-
Size
370KB
-
Sample
230505-w3h9jsfb8x
-
MD5
5465c62964a4c57ca968d6ba5a62658c
-
SHA1
ca67a4513a847a1fb1153488da4fb599c00feb95
-
SHA256
5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c
-
SHA512
245e4d8594497417cdf002589c27a062d28cdc0ae1571ad4e329b0af5b36c88a740ef2a24931b60026c6036fbfda24f4d8316c56520887e5d23590b071e6b121
-
SSDEEP
6144:Tf64bwCDP0Of9W1WmqcglBpSGVrEKkUPSAM33VUmaeQxXI:Tfpb/DP0OlWg/5BpHV4KkUPS7HVkI
Static task
static1
Behavioral task
behavioral1
Sample
5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c
-
Size
370KB
-
MD5
5465c62964a4c57ca968d6ba5a62658c
-
SHA1
ca67a4513a847a1fb1153488da4fb599c00feb95
-
SHA256
5c42dacc8f91c5ee0ebf0eacdbb9253a74d385f2c51eca85ae8f3fe21444375c
-
SHA512
245e4d8594497417cdf002589c27a062d28cdc0ae1571ad4e329b0af5b36c88a740ef2a24931b60026c6036fbfda24f4d8316c56520887e5d23590b071e6b121
-
SSDEEP
6144:Tf64bwCDP0Of9W1WmqcglBpSGVrEKkUPSAM33VUmaeQxXI:Tfpb/DP0OlWg/5BpHV4KkUPS7HVkI
Score10/10-
Detects Redline Stealer samples
This rule detects the presence of Redline Stealer samples based on their unique strings.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-