Extracted

• • Target

    cf876c9186eb271b9a2384302f4ae2c58f42b32aec870399cd80de473434c5d6.exe

  • Size

    580KB

  • MD5

    df725cc5affb15844d8f7ec66fb4b515

  • SHA1

    27917c84aa928ec2fc4ad1949e93e9aceaaaa831

  • SHA256

    cf876c9186eb271b9a2384302f4ae2c58f42b32aec870399cd80de473434c5d6

  • SHA512

    f1f91eea1031b8944bfa06030a74c85b09931e58ca58a50ef58ab0922f9ad80559353f8ac12dfa35bcda580480289eb4fe9722f51c92498fd95bf50275784329

  • SSDEEP

    12288:4Mrmy90imnulSHm64k5M2MrqPd7aXuYAirpzCXBHL7kiwoYMX5:+y9Vg358qtyHAKCiEX5

  Score

  10^/10

  redlinedizainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2