Extracted

• • Target

    59fde1a1d83914c162a3a60179bc87f5185e1c2729cdfd4ee6679e66497c804f

  • Size

    764KB

  • MD5

    2385f382b484888b865b61b1d58e3321

  • SHA1

    4c9eaa8d566d72c3f2776aaeb844044324bf0e64

  • SHA256

    59fde1a1d83914c162a3a60179bc87f5185e1c2729cdfd4ee6679e66497c804f

  • SHA512

    a09b06d404a40092805b847f687d6f030bcd582abf09d0e24b7c59f31cd91c3b3ea0f014dfdf0c980055db077deda65b11a36afe5ba5ab10732ae1f7cfc986d5

  • SSDEEP

    12288:RMrcy90gYNaqzyDeswnb88+eksriZk957dtYwLO90HepqUnAL6MjOBSuYtKG:5yGNADes6B+k6kVt7O9fpeW281mV

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1