Extracted

• • Target

    40960528f00386675ecbef76872da4bc18d084debfc822c96beac39b5326326a

  • Size

    479KB

  • MD5

    aec6c171c9171b73fa9ffaab9d13283c

  • SHA1

    ee653f0bcc96ddd9879c6cc5e5bf3aea8cc198ee

  • SHA256

    40960528f00386675ecbef76872da4bc18d084debfc822c96beac39b5326326a

  • SHA512

    43701c60a620d49202289cb5ddad95dec3f8aa290d95f172575bc56d357afce4e31703ca5697e309f527d64859feeaf778188267bf3e3f70a88aa80443035c0e

  • SSDEEP

    6144:Kmy+bnr+qp0yN90QEMjlsLFoR1UZXEoZ5WwSaQiiG40Skl38HsJfm1B6qswIt3Y2:yMr6y90P+RClZnsoEskB6qslbLXo0

  Score

  10^/10

  redlinedumuddiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1