Extracted

• • Target

    02c7a6cd9c3849a69a122da814446a9582fb657c13370fdcb6907e89f29e7618

  • Size

    566KB

  • MD5

    c81726182bdafff67fac5935985ef5c5

  • SHA1

    76232a2245c51ead56235f0a8f2d76873c1ea280

  • SHA256

    02c7a6cd9c3849a69a122da814446a9582fb657c13370fdcb6907e89f29e7618

  • SHA512

    51d98ce67c2930e7d79fd60db560d18cde96a3c4a226eb1911aff3749ff8574c91fda81d28ab63d14c548bacceed0f86258640ec566d98be9c81a3467f0638e8

  • SSDEEP

    12288:zMrry9046pPFjb3X1GHtgFbvQe8tQyFifYl:cyzGFnHotub58t0Ql

  Score

  10^/10

  redlinedarminfostealerpersistencestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2