Extracted

• • Target

    9dfed59017ce0e8acb51c17b2f59f490f9676898c63399954d7eb87ab724fd2a

  • Size

    1.0MB

  • MD5

    9d5919817704bc815b61b3598bd9aa42

  • SHA1

    1700742fdd8c1e2fd31edb20140fa41fc777f5c4

  • SHA256

    9dfed59017ce0e8acb51c17b2f59f490f9676898c63399954d7eb87ab724fd2a

  • SHA512

    052afd1ae91b6134aacc1bd8c9d967540a2e433cc8d53bf5d78eb0c0e75f03d8efae519e313fb9cc609e02443a50446ce1abe29ae5509495c6183bc35f11f70f

  • SSDEEP

    12288:tMrpy90oGwOeg93h+5mKH/hgeMrGVE/UEhJ1J3tx3/NaUSwSHUNkhCVjm6RNMqq1:EyMSmKIK83t91aUSZH8khCfRTidCwJ

  Score

  10^/10

  redlinedereninfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1