Extracted

• • Target

    9232fb2bbf69dcb46187f911d425619ff3013fac180bf6036523200b2c894f0c

  • Size

    539KB

  • MD5

    15d5bfe553b042af11539a6469367ebf

  • SHA1

    bd511e83d2ba955db2b9a9038467072f9660594b

  • SHA256

    9232fb2bbf69dcb46187f911d425619ff3013fac180bf6036523200b2c894f0c

  • SHA512

    c19091cff1581ffc0b5afaa79920be92ac51a6578ab4699e1b4a45fd35cd199da6193190471eca03448904f867e1a4a5f14f459fd495fdf2613a1a18dbacc6f4

  • SSDEEP

    12288:QMrDy901AmU0pem51QbcnlatVz0ztFuZ6gI0G3g9AMLRHK+ly:DymAmUtbcYDghG6gTpR6

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1