Extracted

• • Target

    b8bb049e44dc8418022aae1dfacc169e97fbea9b1c4484d9117c5c1317496e40

  • Size

    1.5MB

  • MD5

    b9a644a5ad382304a31f12fb761831ef

  • SHA1

    ed18f5e0a6ccc6432674243b2be19e39189173e6

  • SHA256

    b8bb049e44dc8418022aae1dfacc169e97fbea9b1c4484d9117c5c1317496e40

  • SHA512

    013e30af41351f05cb7321c76cee2062ec872d77a6d573260801018c79f509fa94f019f2861f32ef51b0deed33ec9141ced554dce088129719a50e01edc9d19a

  • SSDEEP

    24576:gyguKQzDxnelJ/2ALgp2/WBGQFpuxiDVhW1S8/jgBX6U9yubfxPYlVzGcDe1H1Kd:nOMDxeL3l/WB3Bps3b0KEBfxPY3GseNj

  Score

  10^/10

  redlinemostdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1