Extracted

• • Target

    a4ba884cdf5dcfb4a0d7f880af416dd5c2c4f9a7dcd1c524b78a3363001ab976

  • Size

    1.1MB

  • MD5

    bf2d892ff6b36342ae64b4845c937931

  • SHA1

    8149008efb88abcd0ff883229db2764c7533c91b

  • SHA256

    a4ba884cdf5dcfb4a0d7f880af416dd5c2c4f9a7dcd1c524b78a3363001ab976

  • SHA512

    cf8d06826276ebd3224f959d3c725746d1e0013975214d268816d5e6c9b0de6db950aa5c272265c2f12276d431f55520f5d5ed82c7906db24e60c4b18d1bb0ef

  • SSDEEP

    24576:XySyAiTZVwO0e2FUH9S+wOLAHeHzV5tzytIAIKZUrMT35F9Lou:iSwTZVx05WkyAHKZDH6Z/T+

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1