Extracted

• • Target

    d7d12b7435166a11cd263c0656e552567a1c4288aed11268ee7827df9ba91468.bin

  • Size

    1.5MB

  • MD5

    e4c512e9415e96b61a925603f20db3ff

  • SHA1

    723567b3fe09c78e9fe75f4257d7c85449b49356

  • SHA256

    d7d12b7435166a11cd263c0656e552567a1c4288aed11268ee7827df9ba91468

  • SHA512

    97647bffcf251bb5ab7a9b22a244249481e53f9872899e629db93dcc0a4ba033396ea9f257dbbe3edfe3638839f6f8c82f09aaf84b53d503e55378c80d4e914e

  • SSDEEP

    24576:5yvzZzA7zRqAYEV89K2T46QgxDv67b1/BL2dDUUIKKjv46AgLigBgFh:svzmQrtT4fpgSUVI4II

  Score

  10^/10

  redlinemostinfostealerpersistencestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2