Extracted

• • Target

    505183add5a3aaebfc97dab3c1a149c0.exe

  • Size

    855KB

  • MD5

    505183add5a3aaebfc97dab3c1a149c0

  • SHA1

    3703a59ebe5f167de9d9caafc9c8aa3f0a6b6b4c

  • SHA256

    2f1978fda2c1cc3f69c04c2012ee448e1c853680c60161a1fe4219e836b47d66

  • SHA512

    a0f956f09fd2c4a30fdc01c0c71b3595fa911a4944bfe53cf5ff821aa154871d4b4e5ba258d7e541dcf50dfd71dfa270eed5f00575242410bbe096538abdf10a

  • SSDEEP

    24576:oyPwLg9jdzjozwANnvahQgJBMmtoHjtXJMr:vILgJRo7vahFq

  Score

  10^/10

  redlinedugininfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2