Extracted

• • Target

    3637fff00685d3bb7626a9c1a178cd86ab00789d26960faf09f7e00872c6ebd5

  • Size

    697KB

  • MD5

    39003a1a40877c6df084931b634c4220

  • SHA1

    9f521e3a1adbce6696a8d73ec67dd524ce73c00c

  • SHA256

    3637fff00685d3bb7626a9c1a178cd86ab00789d26960faf09f7e00872c6ebd5

  • SHA512

    b5a7c27651692cc1568dc7307021e1808168af6b882d402f2104005adab2ea0c4d0fe1abc09340210c0eb2a34ff69cea7ebc1f1f01aad7b5655c54d683bd855d

  • SSDEEP

    12288:EMrqy90Wy1zgHvIF7yPaLUB36rnxQesSlP8ZBMiWvRja0o9pXmckBgA9yq:Oyhy1zZ7yyAuxQesSVPDk7k6Awq

  Score

  10^/10

  redlinetuxiuinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1