Extracted

• • Target

    8ecabb42fe3cbdb6a89a113eb3d160817682d6546f7f629811a4621e2cbc8842.exe

  • Size

    721KB

  • MD5

    868ffdfc1a8da8187418ed72676cbf8e

  • SHA1

    47f02374991b47bc9c0b66df0694750cfd3c96f2

  • SHA256

    8ecabb42fe3cbdb6a89a113eb3d160817682d6546f7f629811a4621e2cbc8842

  • SHA512

    70064194c523822269fb741f1b585c5c89dfe141c9b16ee540c9ec8ad468b453762b18e8f1e4c1f3ce53df8d4ff70160a454ca8cc4f84fc985415a262e74239d

  • SSDEEP

    12288:EMray90ZUJfRuHv9R7mS9FV97C8THVKeJ+xvYyGRg9AXeoVH5vwcKebku79CzMbF:OyHJfRIvnX91C8TxagjR/XT5vBOaoMbF

  Score

  10^/10

  redlinedunminfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2