Extracted

• • Target

    32c60980069dd9437b842866c2b575e50ce7fc79a18f7d486bafcbfcaa74b1b2

  • Size

    1.1MB

  • MD5

    f9166f4fe32ccc3d6e091445cf461953

  • SHA1

    525519b4c51e1b6c92f327c2a1c63640137142b6

  • SHA256

    32c60980069dd9437b842866c2b575e50ce7fc79a18f7d486bafcbfcaa74b1b2

  • SHA512

    47f77940f48c9e95dd08f099a728382f8220285513d603e438547851254ea3c57d2d1b667052ab5eee99cdbf47d8ba8a8e577c713d1b2bda75e3c83298291741

  • SSDEEP

    24576:ryan37Mg4LAv4v0SzMQ8iWX5VnTc38LEiwnjb2IvrJNq8KZ0:esLALAv4v3EdX5VTc3zfvrJNqXZ

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1