Extracted

• • Target

    88a204cc91a002ad6b7dcb71d32bbe6838f0fc4c15396ebd2f49f00dbfad5b7c

  • Size

    1013KB

  • MD5

    8a5ba7fa9505b0ab53b3bba76444f31f

  • SHA1

    b19c640d54ad568cf959ac82f1af043566395dea

  • SHA256

    88a204cc91a002ad6b7dcb71d32bbe6838f0fc4c15396ebd2f49f00dbfad5b7c

  • SHA512

    c69170cb5b1a3ea3a086f6f6296b7127c8ab98c169656f76c6f4166fb55a3722edcda1241a74689781b746a013e89b41567c52b56d8b9e147089797d3c3c64a4

  • SSDEEP

    12288:IMr8y90fet2x32ncY8oXTwYxcnLxAut4Kl7dE9VSB+abBk4ECECThnBN0kqtuFr7:0yIx3KM+8KKl7dIV2+0zThBmcr7

  Score

  10^/10

  redlinemashainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1