Extracted

• • Target

    d3013d5aa1afff5f38f204173aa7fb5b34820865f8f41c911557521fc9ca8270

  • Size

    539KB

  • MD5

    2d069d14993aa9cb891c27da35e760ae

  • SHA1

    801e998321101618e7f376e26f11cc24bb4177f5

  • SHA256

    d3013d5aa1afff5f38f204173aa7fb5b34820865f8f41c911557521fc9ca8270

  • SHA512

    e970d059ae47a60e07c1bc529072d00952d5dde066083aa4cac824bd2d16db7ebf59c45f96146a53730a96da5ead6b04c60fc3496279237b1f687886b7d03bd3

  • SSDEEP

    12288:zMrXy90pSO/i0fV0IwRG3Mcf029OBoKFtyhqNtPD6QyKpdHcIQS3:0y2Sai0fPqG80UGKhP+QLYM

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1