Extracted

• • Target

    0c084c47b2043d2a61c58bd88715df9b2661c7ea4551323a93d636adfc6f2a29

  • Size

    1.1MB

  • MD5

    9033e378b36a0c051b47671c46ff7df7

  • SHA1

    18aacaaae29aa22a0d68eefd02f15e45ae513349

  • SHA256

    0c084c47b2043d2a61c58bd88715df9b2661c7ea4551323a93d636adfc6f2a29

  • SHA512

    c35cdf463a51970c28c8f477e87994028f874e48eba7b20bc33ccfc7dcfe02f0057258a5fc87e66cba269b41f37d4f4ece0c19ddca42eece0b622faa931e069c

  • SSDEEP

    24576:Xy2viM1hIrxRj1byKHSagGJXgnQyFr9QOuma+l:i7EhIF7yKyag+byzk

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1