Extracted

• • Target

    41fa7d7f76bc6b6cc8c1be637f314df8e3dfae9562d285f91b20ab9a3a6a3dd2

  • Size

    1.1MB

  • MD5

    5ba63058be4eed1201e25ca2e1612fbc

  • SHA1

    9951f59134ea0d0eefea782717f47048c6de8c3d

  • SHA256

    41fa7d7f76bc6b6cc8c1be637f314df8e3dfae9562d285f91b20ab9a3a6a3dd2

  • SHA512

    6ed4fe0f8412904ff33366b2ce32e983a399ad820299bc8a0023d0faac97d783b728124eceb7d30dd5177bac124a22f64b7dcaa1636b2b4ebad1d9522d33e0d4

  • SSDEEP

    24576:Ay9Juhj4vFY8N0lFm7hURvITRDl9P1Myc1F5Swgf:H3ejkYAR1U1ITzJ1I1Dg

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1