Extracted

• • Target

    7b259027fed72487cff3328c1c2b8cb5723de102dfdcea22a431642b8d43f120

  • Size

    854KB

  • MD5

    3543a5e1f18cd7e9c1122ca2bae0b1b4

  • SHA1

    cdc1026fb069102a97389326c39df9b8746e9d8f

  • SHA256

    7b259027fed72487cff3328c1c2b8cb5723de102dfdcea22a431642b8d43f120

  • SHA512

    4200281ca69de4987f91d310bc4979f21d9184d2c03d143ba7f1bd6ac01a9c25381c7437501cc0bbe1838e8cc1875a10bb9aaf43a334c844759e12791279b264

  • SSDEEP

    12288:ZMr6y90cayt+3biPPl1UV+eGi5dazH6WR0cY4my6G8dtmzktlbinNOVFGP0:vyBt+e+RGi/azH6pcAbdtmcYNOVw0

  Score

  10^/10

  redlinedavainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1