Extracted

• • Target

    7135d1383c6c3b928dffb0f21e1a0a7db275809f3cd64739e724c4b7aac5e90b

  • Size

    554KB

  • MD5

    2e0f454388f98cd6ba7a3a3edc9aa8be

  • SHA1

    ca53441e1115b3e83cd7879782852807f761c4f2

  • SHA256

    7135d1383c6c3b928dffb0f21e1a0a7db275809f3cd64739e724c4b7aac5e90b

  • SHA512

    1abc4c8c2aff5117dc69828dd82ef21933dd6b56229862c5bfcd1234b5edd57564b335306099105186082c55e57532a67c9a8775dc3cffba9a98c9b919f021ec

  • SSDEEP

    12288:2Mrky90XfC9c3GHTgjMG5EVxofK3aAwu38K:OyKfCnT4y13ay38K

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1