Extracted

• • Target
    https://cdn.discordapp.com/attachments/1512794411896012905/1548324131316174918/logdata.zip?ex=6aa6a4b7&is=6aa55337&hm=d60097f7adba448a8409c02b1630262fd8580496d1873c436eae027aced46780&

  Score

  10^/10

  discoverydonutloaderredlineinfostealerloaderpersistenceransomware

  • Detects DonutLoader

    loader

  • Family: DonutLoader

    DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    loaderdonutloader

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  behavioral1