Extracted

• • Target

    105eac5119814a1870029f8613bf180ba1f28517886c214a0ac835580ddef491

  • Size

    587KB

  • MD5

    0a496bfae3032eee20a44186e032d47d

  • SHA1

    66277b02b40c753f1bd2687621829e7b0f85a5d1

  • SHA256

    105eac5119814a1870029f8613bf180ba1f28517886c214a0ac835580ddef491

  • SHA512

    90093646d32df52f4aa83f6f0fa4098557985f27d1f77a3a91b979dd1775bba2c9753f1737981741afe93363d32a42dbb4eb8386ea1b21e191a9325a93b5d744

  • SSDEEP

    12288:cMrTy900gURiXeGHKWxGvf3LmZ+MmWw2hHMPdjkv:nyUUWFKWxGvDomu4lkv

  Score

  10^/10

  redlinedarisinfostealerpersistencestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2