Extracted

• • Target

    cb36737ab3399bd6ef76bdf5c3c441ed0c940ea5730f038b79c7fd31ce1d1fb8

  • Size

    583KB

  • MD5

    288aa32d7f130b0fbf5ad485d4462a0f

  • SHA1

    8e1d2e7e22bdd94b7763a302d76e0a25ef10b362

  • SHA256

    cb36737ab3399bd6ef76bdf5c3c441ed0c940ea5730f038b79c7fd31ce1d1fb8

  • SHA512

    ffdd492bd8c68cbbaf54ca96411b8acae505e889646f8c9cdec4606afce552677bb58bbf3daa5cce44a5686888662dbf12dc4a19c8ca6fae7b1c88ba435316d3

  • SSDEEP

    12288:EMrSy90cYYfSuQvTh/n6hHiLO4m5LsVw51Fa/NA6cL/:myNGuQ7B6MK4mVPa/NA6cz

  Score

  10^/10

  redlineronamdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1