Extracted

• • Target

    754807ff67ae26797c7e20285373350421db04351b130187710717bcca4ea330

  • Size

    760KB

  • MD5

    bdb4bbfb19e7b6e152763a5d911c7f22

  • SHA1

    edd68a38d03e2f97c2c469f48c8a92697b070346

  • SHA256

    754807ff67ae26797c7e20285373350421db04351b130187710717bcca4ea330

  • SHA512

    de39fc23d7e523fa8049d48d9e9b044daa818629c826b32f9cddd399b4e8d04f332639152b49f4269766fb68526b98e4dcf88aea2f52e07dc18bdf7d272c0140

  • SSDEEP

    12288:aMr5y90omARs1L+UtX8jCJfz/zyyTmjr2bjQ24mnQHDYevSONV9WZR6+Ik:TyJmARs1BKjC1Pyp2bjQ24myDDvS63Wd

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1