Extracted

• • Target

    487a9ee3317232bf189ba7772f96f91e54b27e559ffeb6082a47d19ddb473f0e

  • Size

    584KB

  • MD5

    4eb78fc6596621408c0483355b3c9796

  • SHA1

    9cf05e59fa68dfece79284b37cf5cb13614a5230

  • SHA256

    487a9ee3317232bf189ba7772f96f91e54b27e559ffeb6082a47d19ddb473f0e

  • SHA512

    3d3c9a709220c35a11615f4e5762cb2466470f1a5db66b86a007f8e722abbb346edeaef2ff34340beaad331a9eb876823d9d702b42afc151d80ab266a96c5ecf

  • SSDEEP

    12288:fMrMy90AUgjKGu/hSzjMajjx8w/cD2fPJUjTD2nIHU3N7Icvg5+YtDv:Py5jKvSzQ4acmP/0N8cvI+YtDv

  Score

  10^/10

  redlinedizainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1