Extracted

• • Target

    6bb7c2c1f7a87de79d4f4728108798dcc905aec9a4b154b9e0586a2ebaadf5fc

  • Size

    1.1MB

  • MD5

    eecd2bdf7d0a2f352459902b6c7eaac1

  • SHA1

    b0912e900ae2374e04aa9311bc044f4ad39a9761

  • SHA256

    6bb7c2c1f7a87de79d4f4728108798dcc905aec9a4b154b9e0586a2ebaadf5fc

  • SHA512

    dabff346d62a0a63a52fde697e9da9ffa76f90ce015701bcd0cae3f72a0cebded379feb2756a1ba190da71f23d9757b01000ec74c67ba8521d099a8e37c8e7b6

  • SSDEEP

    24576:nyT/pfpU86y1ymiHy4L6RkpFfSH63LcxdRZbVks7U4fqqnbkXxtk7ya:yrhpmyctHy4L6+p8KLULeErnnYXq

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1