Extracted

• • Target

    4859ab09aee3a5b3afd36469b0e03064fe5d29422bfb2b522eb027989aa31ee4

  • Size

    773KB

  • MD5

    7d90af5042fabd5f2c371eb6237ab3e8

  • SHA1

    096330632b18a78a88d30328584d3e94aa7c4cca

  • SHA256

    4859ab09aee3a5b3afd36469b0e03064fe5d29422bfb2b522eb027989aa31ee4

  • SHA512

    b85044dd1ad936a050645291fdb87c988f58c9f28f1bae6d9d55e85aa1fe89e6aa663b72e8ab1d728891966973c5b353d1a60dc42908c03bd93267cbbfd12c8e

  • SSDEEP

    12288:uMr1y90KOE2rrWdU6uGoZdHFzgPRDRCtlp2dI9hkXTBNcormP0xB8p682CJUKd:7ylEm/XojpgPRDQ1AI9heNHq0xK6fCT

  Score

  10^/10

  redlineduburdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1