Extracted

• • Target

    82db0d1edc910ecfffaf7893a6dac122a9b38e277730e5a7b8af5864a78ac998

  • Size

    769KB

  • MD5

    a100bb6fb70396f78ca0a9bab420280f

  • SHA1

    5522a22dd58ee17590d9af1df8fda9bee1c4a23c

  • SHA256

    82db0d1edc910ecfffaf7893a6dac122a9b38e277730e5a7b8af5864a78ac998

  • SHA512

    549ec2adabf76dacf061b63a8a4cb72d8f7dc49840469492d5bbbeea00ee08464068e39e19cf9f32181691108a69355408e14fac534bf26774ec5ef35f1e7496

  • SSDEEP

    24576:oyI0ron5PszbfobhkjgF74VRr+ot8OlT:vz85sbfobWjg168a

  Score

  10^/10

  redlineromikinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1