Extracted

• • Target

    f700d014002c362b87be0327eeb02563e38ea15912e05b2050ff0b8c5c62acaf

  • Size

    1.1MB

  • MD5

    1cdff0dcd811951a9beecfe42b43cb7e

  • SHA1

    520f7a54b6732d2154e49663743387e8694a526f

  • SHA256

    f700d014002c362b87be0327eeb02563e38ea15912e05b2050ff0b8c5c62acaf

  • SHA512

    5803c3a0340a3297b8c2a1436da16acb03c46ae0321f001374ae4f5e0a3f275f6075dbb546eae40de767df8f2e117f6f826e7a840b3945ccdc222ffefc9e8739

  • SSDEEP

    24576:cygvWUW6k492zpxi89C8QoKw/WpnQPf7P0c0Jkk3De5JwjUgM3:L8W6kk2zpxP9swepnyPQJ9e5agf

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1