Extracted

• • Target

    fb113d347e21b140c68584acd6a91de687000a4ba8d8b316437fcd3a9ea6cf3c.bin

  • Size

    1.5MB

  • MD5

    c4044ec43ecc27d8cca011fd950507b2

  • SHA1

    fe5910eda95eb92adad8584835f4b73785369029

  • SHA256

    fb113d347e21b140c68584acd6a91de687000a4ba8d8b316437fcd3a9ea6cf3c

  • SHA512

    0ee73970954dd5381c22bdebb6cdb08e75d8f98dd2a032f77579c5c851d47386185d7ead15c1c1f6731b0e57e3ee240ae17d1e98d79800f6da5912baf171aa10

  • SSDEEP

    24576:wyvQPWck3yAt8OJ28TgPR7qSyr/y+098qXinKl/UK+Sv/5KhvUX9AZ3kdqN9pp3E:3voT1At8OFT05Xyu+09nXiKlDVBQ8tgS

  Score

  10^/10

  redlinemostinfostealerpersistencestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2