Extracted

• • Target

    2a5cf64dbcb336f9dd77d153f67e72c58c08ffe50190b1e2c9f370c3741380b1

  • Size

    714KB

  • MD5

    e77fb7cd586e00041500a195d80853a1

  • SHA1

    e645be832033e59892afd4117b191badacf46bb2

  • SHA256

    2a5cf64dbcb336f9dd77d153f67e72c58c08ffe50190b1e2c9f370c3741380b1

  • SHA512

    f074995e8ee38fd56beb23355c3cbaee89c1e6305ac91fa8dead6599e53bd74993fc8aabd8effd94b8807bc79cc0645fc2cdb38b35f78e06052c39552a055794

  • SSDEEP

    12288:rMrRy902Vko5h3Fom6tALSa3YGsiQR4mvNOFdrgKWDKD+:CyfP5Ram6tAdYGslR4mvoFdsKWDKD+

  Score

  10^/10

  redlinedugininfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1