Extracted

• • Target

    a3e82f3c4c87ba408542a3f4e10d606dcf204a53edf0a7f6aa369b9920e82341

  • Size

    856KB

  • MD5

    dfc59dca284135282ea4eaa0e655a50f

  • SHA1

    d1d3155245dbf214c87b0d2a0051cfbf68f3f8b3

  • SHA256

    a3e82f3c4c87ba408542a3f4e10d606dcf204a53edf0a7f6aa369b9920e82341

  • SHA512

    09c870e20ed7b8a58cd3328cbff17ab1a36daea27a1029b3236f33228cd67b741e3a0b8aa922350560117fd1dbbd1a165bbd1f2555facc5b58688486d5ee19d7

  • SSDEEP

    12288:JMrKy90EGHXyn/N9P+VJoVFke0nyhtE1AtF/KS5x2VrXcyw220ShBh6FjO7:byjGHClJoJyvE1Q/KS5x2pXRF20SUK7

  Score

  10^/10

  redlinedavainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1