Extracted

• • Target

    1b5c0620f5160b1bae0935b07361c00f425a8baf2d1db5fcc1685d82df94ffd3

  • Size

    642KB

  • MD5

    8755599afd40b2d3e814329ba9d0f6fb

  • SHA1

    8c66c455adc63d201221f39a0ba4277d7109b13c

  • SHA256

    1b5c0620f5160b1bae0935b07361c00f425a8baf2d1db5fcc1685d82df94ffd3

  • SHA512

    59dc7901d28ba10ee24e9d33688f73ddfb68f5b4dd91bcdf124e5c15e67cd7cf9333b3ad22aa47cd7c3357db2e1cc8b4ca8e193821ccd8aaebcbcef69681a8ee

  • SSDEEP

    12288:XMrLy90pjm0TNejfBeWc+/spO+pKGWkAfiUVJwPkbMYF:AyCjmbZJc2sZ0GWkA6UDwPDYF

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1