Extracted

• • Target

    54de0ac15eb53a24d3e3982f7d579bffe916fc02cdec2d8d70d22ce89c669fa6

  • Size

    480KB

  • MD5

    a49a85456374883ec3d20c8645bada06

  • SHA1

    0a3155817c717e08c5cbf51c3a926ad432371668

  • SHA256

    54de0ac15eb53a24d3e3982f7d579bffe916fc02cdec2d8d70d22ce89c669fa6

  • SHA512

    964d28d076e97e414a1da0b83a4990251e8a81b9917657c3b0f4b492549be46f6dedf0beb85f389037924d792e1ff91719c612f6f41458e14fbf1f0a55746e20

  • SSDEEP

    12288:nMrIy90sW/ieUkMygTEQq+CUuYvKh3B735ft:vy/AUkJg4Qq+uYIpRt

  Score

  10^/10

  redlinedarisinfostealerpersistencestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2