Extracted

• • Target

    a2c7bd3961d1781c36b6dc46216e59b2eab98ce0c9df0e0d20b5c8ca43abc7ac.exe

  • Size

    714KB

  • MD5

    81bf1502bec6c9cd9e60f405700cd9d6

  • SHA1

    63429c2bb760a09bce0ac1c647b46130a8009d21

  • SHA256

    a2c7bd3961d1781c36b6dc46216e59b2eab98ce0c9df0e0d20b5c8ca43abc7ac

  • SHA512

    b4c5a3bbf55e5b2a749a728f2771254941c3b3eeead937022b07ac4c571ca7b6ef8fd8710cba53dce6d815e035f42f50b42508e9eb9f40ca83510a6a4d837b5e

  • SSDEEP

    12288:TMr2y902zbnmNl4yrALbfw+BUJCPGNhr+Nj6E2kg003rvpnCUFl8Us0JOxSTnj:pyRzbnul4a9+uYuv46yWDAkKUs0JOA7j

  Score

  10^/10

  redlinedugininfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2