Extracted

• • Target

    b04d292ebb745b28099104e579b5d0aea75e8dc164bace5a943eb46767825c00

  • Size

    642KB

  • MD5

    71b9c7a08d4ca044ef3a748fd3f458c3

  • SHA1

    6442795333fded41c22adc47ccef8556908905bc

  • SHA256

    b04d292ebb745b28099104e579b5d0aea75e8dc164bace5a943eb46767825c00

  • SHA512

    032c5ca7ef349b0dda32f21d1a8d4ce330faaebac2865bb8896ce0237f19eabe18d6c72aa3db2dd32a829460ac0692314f5a9c5c5e80ece92621eb492bd12255

  • SSDEEP

    12288:sMrFy90OHm6myiHXg4i6X8Lro7VUQLegvklac4:xyBWXK6X8ro726tvX

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1