Extracted

• • Target

    file

  • Size

    855KB

  • MD5

    2b0d27f3a0c2cc1cf6575e27e8ceea06

  • SHA1

    5a10e0523966fa052bce121f6914e419f1a93070

  • SHA256

    0dfc65d1747e97aa8f387bac127f1839359352cefc169e008f58de2ff06dc49b

  • SHA512

    f3907fb38af2d56b43f9935adfa8a104cad8f1f2da120a5e5ad8776da90c546b3adfe9cf6a5e024b8d4051d46f620e0b78c000f4370cd72f810ab25a9dbd70d4

  • SSDEEP

    12288:sMr0y90cNXWmqLZ/89QQD5PmB7FKnxxeUiTL8OYkK+AuJVuL6dHTbE:oyLne89QSWRKxEzL81XEsL6dHTg

  Score

  10^/10

  redlinedavainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2