Extracted

• • Target

    9c1321da87175e5e4fd7b53bc0ecc3ef4d1d7aff3ca843ee58ef408e48d1a245

  • Size

    478KB

  • MD5

    b0236bcab41af6333182f010f5e316c6

  • SHA1

    29578b66eee666931eedf460cd64dd724611d4d3

  • SHA256

    9c1321da87175e5e4fd7b53bc0ecc3ef4d1d7aff3ca843ee58ef408e48d1a245

  • SHA512

    d33045d653b4840763ebd96c8cda9bf1125e5929bce80154296a0602cc441023dfabba2ad4b8f5e40f33f76bbdfb9b112df0cc5c6cdab552217952274b38ac4d

  • SSDEEP

    6144:KPy+bnr+Dp0yN90QEIOB5GIeVYoIvKtbVztZaN2Gdrrq/PdclN2cR8Oyz4C4kHQW:hMr/y907yIeVt3ztZQm2lgcCO3CDLn

  Score

  10^/10

  redlinefusadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1