Extracted

• • Target

    a71e4ed7f32e122f0410243a6b903fbdfadc1ea2d22a1ef469f31a0f211dc40a

  • Size

    1.1MB

  • MD5

    eab500a2c4f2f4315506e82670699fec

  • SHA1

    72bc385691c272551c332b4dd2c90b80f166b863

  • SHA256

    a71e4ed7f32e122f0410243a6b903fbdfadc1ea2d22a1ef469f31a0f211dc40a

  • SHA512

    e230ff91bd67c8366d129ef637b5c5aa7320e7a2f30f35428a16e2ce065921bc4a37b69038825c730e4d71ee4bbc30a430e3e0787e5750303d24917933a9c065

  • SSDEEP

    24576:Zy3YWEKPlf+bifFNP2Y2d8x8MPawDW596pYJry7A:MIWEKvfXL2d8x5PxDWL6Ge

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1