Extracted

• • Target

    c99ccd542715d6fc548d88131f9dede3a3527e2a977f584044af1f857edb7b63

  • Size

    713KB

  • MD5

    ad985d72b97f1204cddc8bf7d9d139a5

  • SHA1

    b53a6ef65f96540c516558ba80b3d804664d633e

  • SHA256

    c99ccd542715d6fc548d88131f9dede3a3527e2a977f584044af1f857edb7b63

  • SHA512

    1989c553173a0c07284f814a3230c860c1b9330f40cfabe5f47ba0f37de9ce5f2dc217a2f8d19ef09be44bb939907f0874a44fd9b9b7164bf72724245310fff2

  • SSDEEP

    12288:cMr2y90mUMvHyfbxIKfKrp8UQv7w0LcUmDfsXGQEeYOxN:CyTUMvIKKfKre1BcU5X+9On

  Score

  10^/10

  redlinedugininfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1