Extracted

• • Target

    f06ec0a5f4a2e8642776258efabd20d6e05a0367ee988bcd36e380a88d372e8d

  • Size

    1.1MB

  • MD5

    55c402056e20f802d441d2ef14182018

  • SHA1

    540c19a3246568a0c36d0705b802bcb5d3a6b87d

  • SHA256

    f06ec0a5f4a2e8642776258efabd20d6e05a0367ee988bcd36e380a88d372e8d

  • SHA512

    96c2b4b842213968f5bb3bc5f9665b95310ecf36984c700338175e9689d78d4f490482819a9db43f908d5c42b561bcc2f52756d18059303b4397e7b19b200e7c

  • SSDEEP

    24576:DyKoe9JjKspmbf59cCN+Dt3v8wACeqmm7bPKlDyHICWngWjDJA1+M:W/e6spQB9NQ3v8wAVqmmP1AD61

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1