Extracted

Extracted

• • Target

    25fca770a6d07568fdb80562f268396fe56e5eee31642465a7cccc8fc1327e6b

  • Size

    850KB

  • MD5

    dd610090fcca1ab9dca44e75fa6ec956

  • SHA1

    09db66afa9c17bfb0987cd68b92a11935a84391b

  • SHA256

    25fca770a6d07568fdb80562f268396fe56e5eee31642465a7cccc8fc1327e6b

  • SHA512

    d365ed9fbab8368e517d9bb64176c7f8a87fef7409c4c2920da60a170ad5b6fa7d3b497756440b47d85e5d3c6dbbe5b458ca29cbeec7859b3baef5a373267986

  • SSDEEP

    12288:Ky90oUEXsNWbXV+ikWmP0SvAVq/U4aj4E7KvCcFuqo2ZNVoCoFOtwx3+m2Ti1Vb:KyYUsYRdkWNSoVevClyZT3Fwx12TiPb

  Score

  10^/10

  redlinedonkagenainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2