Extracted

• • Target

    046e6b3d0b2e06e3bffb97a6e4149a028878e496d5d290a9ea686371355e93fe

  • Size

    1.2MB

  • MD5

    88c34e9579d94f1ed6d575a5d3c3061e

  • SHA1

    d18a2399b3f92b728a4b1da383c066dc3be0be38

  • SHA256

    046e6b3d0b2e06e3bffb97a6e4149a028878e496d5d290a9ea686371355e93fe

  • SHA512

    0c31cb8bf189a1808d3b1f1e1e1ab42b8a7ceac3637a6b51d2888aed728be52d96c1883a5a2b9cc90c5657f10e8d11d363e5d0f96a31893abf074ada0f75b4fb

  • SSDEEP

    24576:qySKs2Dfs1fVSlffI8jm9SkiHvjeLeROtnrqsDCg65+nhkYmp/I9:xSamI3qzkSiRORrU5+n2JJI

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1