Extracted

• • Target

    5f63d2b146537f90b0f06bec071f36688d7d1c546d3c0d2dc027e1211f4f1be1

  • Size

    714KB

  • MD5

    8810b90e816d9e780c21f91af7edaa65

  • SHA1

    e31c9fc98182d400b9eff29a217a90677eea2fe2

  • SHA256

    5f63d2b146537f90b0f06bec071f36688d7d1c546d3c0d2dc027e1211f4f1be1

  • SHA512

    ece75118b0a2005bba5f083e52788c93fea354f027d8c867a889bed108d5d7c0800dc1b5a22ab1451a8d625952f200b67130c8a30b51b9b42802aec24cac662f

  • SSDEEP

    12288:HMr3y902/NNHxDv4rGvIyOAVWMSbUPvokDWZ5r1exfG9GRToLP367tT07AfCO:Yyd/jRDv4r0IY8u9W/F9GxoLPStY7pO

  Score

  10^/10

  redlinedugininfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1