Extracted

• • Target

    beed3c53da7bb7e64beebecfd59fb8817f238633a13db31f215a49dd0b57e723

  • Size

    556KB

  • MD5

    87dc51e11f30175c8f145115a9c4c8e2

  • SHA1

    27136c515544038536301b1a0dea4ce0dd91feef

  • SHA256

    beed3c53da7bb7e64beebecfd59fb8817f238633a13db31f215a49dd0b57e723

  • SHA512

    eeab09783461fe566d9bc0f1cad480466d34a9e43b761a7bbdad61825b024c3c61637075ce847d8e7a2dfd1b63057b1f2ceb95ab164476b02ed6a16a1a9b0e64

  • SSDEEP

    12288:7MrNy90aXoh6ngEtw4KlBhC5bOtvEaIqhWeSYvKDKkNOxpXkZgme:eyngggs5KlBs5bOp6qh9y+k87k1e

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1