Extracted

• • Target

    c526e10b5d27c008796fb11887cd2ce130f97321980404a45a1e3d80f3c8bb9b

  • Size

    1015KB

  • MD5

    9ac130138862a0d01ed360241acd7ba5

  • SHA1

    7d83ee72dd67efcac65e7004ec3b570cc9ca6952

  • SHA256

    c526e10b5d27c008796fb11887cd2ce130f97321980404a45a1e3d80f3c8bb9b

  • SHA512

    d085b277d7ddfc5bd2bd35a1e9280e77abc69d6bc827a759872240e2bcebc2803e7b4da34e2e1569528c8c9c7e39d0e2ce72cb9d41bb741901a1a9532ac80069

  • SSDEEP

    24576:qyACuKT7PmQ9kGdAzGDvW9+AXt0YiHsRNcHYebrzp2B7cM4:xACuKDkmAzGDm1UHsr+5HclcM

  Score

  10^/10

  redlinemashainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1