Extracted

• • Target

    a2f47badc0b0db8e08ca23952f65ce6f5f9d02f7927a0b4e82b38014853bc856

  • Size

    1014KB

  • MD5

    087d9eb4a4a7ab1f79923d350455cc90

  • SHA1

    bb022ec55269982ef9cf48578fe58deddad6a089

  • SHA256

    a2f47badc0b0db8e08ca23952f65ce6f5f9d02f7927a0b4e82b38014853bc856

  • SHA512

    3278fc5d05721bac47f33711a7d181f92c0eb0f1376b58655f4d94c1294c38e9195eb4eaaf90aab4728a99af84a07487ddf22e020fa70c1d0ab4179a562b0222

  • SSDEEP

    12288:SMrYy905v816+DVKGcsQdJAxsJG3prsBsSQiKda1X15tbjLcvCopFWnNf3b2f9Ss:Oy7DosQDA2JG3prsBDp1fjLNopZShM3

  Score

  10^/10

  redlinemashainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1