Extracted

• • Target

    c87115c625629f94b55a7dfe3760e08425288218eb3435f982ebb7309f41cfd4

  • Size

    567KB

  • MD5

    bdd3b76782069e58bb176e3603b4939b

  • SHA1

    d020a6002597ab1b4d209803bffdc9d45b5f152d

  • SHA256

    c87115c625629f94b55a7dfe3760e08425288218eb3435f982ebb7309f41cfd4

  • SHA512

    6e27c6bb0c99d4bd03b64f819a1ead686ceb23c5bb2cd0305f3564fd669370ab5e08b06f816d5e47315fbf8e2c573b0fa9214f9c175aedaf9b19e7521c62dc4b

  • SSDEEP

    12288:0Mrpy90FG67SL5ODLG4nE4IAj9eaJi2WyLXR8w:Ny6YELG4nt3nJpVz

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1