Extracted

• • Target

    ffe2a708a709e22d9fb7df806d94c634731c96ed983fe90ffca3e1267e2842e0

  • Size

    1.1MB

  • MD5

    3aaa08ec60a18ff0a7e1153ddd94c892

  • SHA1

    f2c2b3d2be110b16c612c2155fc631e277378301

  • SHA256

    ffe2a708a709e22d9fb7df806d94c634731c96ed983fe90ffca3e1267e2842e0

  • SHA512

    8fbed9e5a112c5df46255526189757482bc80b2db93e10ede51f72c1a11e32d908cfcd6e626cf1711840a0e0a5b029ce16245cf932edc24a06457f3af57ba34c

  • SSDEEP

    24576:3y2IGo8+juB34WZPUAlkohBA0dpubboOjkB6bgi7owpDPQOA+B358:C2I1liB34qUQkohBA0buwOj+fikw9bAo

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1