Extracted

• • Target

    35e37c583bc7bf6119a8e4a9989f856e6b1342080ec6b39cc7436da49abb51d1.bin

  • Size

    1.5MB

  • MD5

    4ed630907f0afad992751532cf64b2a2

  • SHA1

    721f9b56ebf5fab181c057ad020b3bad86630e3a

  • SHA256

    35e37c583bc7bf6119a8e4a9989f856e6b1342080ec6b39cc7436da49abb51d1

  • SHA512

    00dc0a0a44fc71d3f67dbf1b52893820e87908c79536f1c1dfc27cb1f455f49ec17d6994f4bd7df2b005859a139529c93c8d40bdb7ec63de6d6fd0954872a093

  • SSDEEP

    24576:zyCGZGia/UzsgMgTxzFYR2H503pgSuSG/0vMVkJceNK7/cR31aWxNfMhXMsGW:GCGnz9M4xpYR2Hqlo8UVkJzS8lamNfwC

  Score

  10^/10

  redlinemostinfostealerpersistencestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2