Extracted

• • Target

    a2361a52ba84bc88975187760cc0c03b0feb246854bbfa97fcf2500f002d6837

  • Size

    424KB

  • MD5

    55fe1c81835743cf60eba2ebc2b9ae6a

  • SHA1

    2975d9b1914837df0507d29ca385bfab14ffd06a

  • SHA256

    a2361a52ba84bc88975187760cc0c03b0feb246854bbfa97fcf2500f002d6837

  • SHA512

    deb41c9d3829e6c213af0ee8dba09e46b796e23f2d963e0316864a8b1595a7158523342204fb0a70049ded59bae1ad5016c2ab84537cd27a21f69314d45af686

  • SSDEEP

    6144:Kqy+bnr+Rp0yN90QEjaZK+Ql1+bXhpZ+CMr8zly1Trhj6Ff2I+fhtY5Q/zb5mj7o:2Mrxy90l0iGhprMwzly5V8YAazFm3o

  Score

  10^/10

  redlineronurdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1