Extracted

• • Target

    1cb8f7d875e858bd44810f77fa8001653d978b3d320708dd6b6b309bb284dbee

  • Size

    578KB

  • MD5

    e832ba64b351a225f1d6d090935f9551

  • SHA1

    f82b5e704fa34d3bbaba34b6d29355afa0254029

  • SHA256

    1cb8f7d875e858bd44810f77fa8001653d978b3d320708dd6b6b309bb284dbee

  • SHA512

    c4b73173b278eb1902110354ff63854eaa9879d6867b3252a0c0fd08f381596e1708a8a700a7a100e4ec25b055f4c7ca7a04b3130973aa5f0b74187ba5867ac4

  • SSDEEP

    12288:gMray90qWeAQXZ+usIHJBEN3KmRYg49fqM5eX9ij2n9ru5NYxbjpf:Ky4oZ+usIHjEXsDHqpUYxbNf

  Score

  10^/10

  redlinedasainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2