Extracted

• • Target

    235b89addca19cb73f10f0820e0e01e7c38f5c3e71893669ad15560cb35eab33

  • Size

    705KB

  • MD5

    f7c2a0fcfcec1b5d89ec07f74fdb8cd5

  • SHA1

    bd27fb1b38d261e487b40c4267d4972e2706b702

  • SHA256

    235b89addca19cb73f10f0820e0e01e7c38f5c3e71893669ad15560cb35eab33

  • SHA512

    edb279488566f22c1fcc9a6ab434372d453ee5ebe1998b78024909e54317cb312dca6ecb2380779630c857724f4a5ab469524eef929cf28065cb0f838a6f3373

  • SSDEEP

    12288:HMrpy908FMsUjGxWve+YewchuYCHa2Mp8+Eg/b8oYjvvh4DiXqNlz0jwM1k:iyLFfUjGx6bjnCHRMpw9oYDGeXglmHk

  Score

  10^/10

  redlinedugininfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1