Extracted

• • Target

    57a1f686ca4f199e85ee7d744316bb8ae93f5dfde2629255eddd11661c96bc99

  • Size

    821KB

  • MD5

    ed4a3c16dc33e2f0aed7c6989998ae56

  • SHA1

    992e6645c88164a415b0b9ac279dfd5de596635f

  • SHA256

    57a1f686ca4f199e85ee7d744316bb8ae93f5dfde2629255eddd11661c96bc99

  • SHA512

    30e8218b348d4b06a17a6ca70f61b5b03d94139e39e5280b77f7d3a54340932199f68ff3b0d038372053f675c1551b601f773b5c70667a766c991b95067bad61

  • SSDEEP

    12288:fMrXy90njSalmq79UBfjAQaBpEfqAfuQwk9j/wDLKxzofYEo6oBcQsm4v:AykR79UtjB3R1/WLKxzowJVMv

  Score

  10^/10

  redlinedavainfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1