Extracted

• • Target

    601594bf04fcf12ea9de2717aff39d39ce0b8dca13765964caf24289c7a358a8

  • Size

    1.1MB

  • MD5

    8c78214a404307bdcd333e019e6a9ee1

  • SHA1

    8204844251327933f5a3ea4137050e5c488b4095

  • SHA256

    601594bf04fcf12ea9de2717aff39d39ce0b8dca13765964caf24289c7a358a8

  • SHA512

    b1492ca1d585662f8b3eb43206078dc3edc59024bf0798d4e7f72f57ea940c99ff746ebdcd794bfde74256a023fd6420b2066d033b4157aaaccecad9a63ba187

  • SSDEEP

    24576:JyYbF1kKTPvtwrzb6kKKh9ZVcG1FAF3mRE7pCfke4HBKXlmOPYBOw:8SXLknEIVf3AF3mRE1Cfa0VmOw

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1