Extracted

• • Target

    0x0007000000014145246.dat

  • Size

    170KB

  • MD5

    a11e653a61026cdea9517e53378ce06f

  • SHA1

    7de66df8bd0cd91dc2802aad78ded139c4164951

  • SHA256

    216934868ec1697ba95b5cff5b792b8d270ad78eb88d493ab5a5d183860a9080

  • SHA512

    b67d48d4f468a406860f2b87409b8a2c20b8be3dbab2cf1792e2eb092a376846f2a02a661b08755d0a90a0e882d8f18f6bc33a5071cd3d5889823cf0dcc9b276

  • SSDEEP

    1536:TyqlwNqlVZRGWY8HrIGtRSotDaZIPeKNDETGqVqbuFz1CSwx83wYk/8e8hR:Th6D3GtzD263qVeUESwx58e8hR

  Score

  10^/10

  redlinedizadiscoveryinfostealerspywarestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2