Extracted

• • Target

    dfe410b457be1e2f55811a973f7370f68fd69dd8e806c8ec1de1652c52288dcb

  • Size

    1.1MB

  • MD5

    35858bf84c53aee1ae3b70b36fd50ef1

  • SHA1

    b216f5ac2be6a676ea591e09d696c183b1a0d53a

  • SHA256

    dfe410b457be1e2f55811a973f7370f68fd69dd8e806c8ec1de1652c52288dcb

  • SHA512

    b3a0163b35046270e1709b9e3649bdc62fab0f79fa718910634e07431e182b6a31c9ec2b7efe15a7e5254f0fc348ce8f9c9e407f8be6431abd331414f302e85f

  • SSDEEP

    24576:/ybjcbP98Jq1IbEur/eOsIMI+hXBoB6z9+h3sws60W0Cn:KUeJq1IbE4GOsIz+TsRJh2

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1