Extracted

• • Target

    2c90cae133dd907c23b102bda785d4f4a3d7ee3613ccc0630930386dc23c4fed

  • Size

    566KB

  • MD5

    a5b6eddb60e381c69421ee60b28b68f2

  • SHA1

    996a54f8833c380082d0af5667dfedc256e66248

  • SHA256

    2c90cae133dd907c23b102bda785d4f4a3d7ee3613ccc0630930386dc23c4fed

  • SHA512

    fbdc26ea54b91dbf419e5330e2dc97b376ac11dd219f80910ab3284a77dab8d497a7b41cbc1e083918834eb5b72b4e82303e02df595bd0aa59755b882194f6e9

  • SSDEEP

    12288:uMrty90Tkg9FqMeMk0cxSRfgToTHRm6oLtQ9MchnG:rye1ob0QSKTUF6RchG

  Score

  10^/10

  redlinedarminfostealerpersistencestealer

  • Detects Redline Stealer samples

    This rule detects the presence of Redline Stealer samples based on their unique strings.

    stealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2