Extracted

• • Target

    1eb09f39e174f2fdedbe065961d8b4180ea51056bad01700041571d1339e8ecd

  • Size

    528KB

  • MD5

    3a18d935cb892cdf8c266479e7a9ba5c

  • SHA1

    99441183d6951f07b49492078d599992fed469b4

  • SHA256

    1eb09f39e174f2fdedbe065961d8b4180ea51056bad01700041571d1339e8ecd

  • SHA512

    1accda4ea8a49db61009615cfcf7b48ffa83522b7684e918ddd5c75c5e57953d8c33b716bddfdd13923435e46913a446e800333fea810636c0a3593669c9eb49

  • SSDEEP

    12288:+Mr3y90zeM0gs9TrS9qhlbIel+x3vDJw:lyFM7s9r2qcu+x3bJw

  Score

  10^/10

  redlineromikinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1