Extracted

• • Target

    d80ce790aaaf39208b79fbebd709c164f0fe291e5ab84be022c7e6ff07ed539d

  • Size

    1.1MB

  • MD5

    10377ec3bfd93a1b37caf188ce1b9da8

  • SHA1

    a0c21a18aebc9cec4f25f02175e9a54ae6abded3

  • SHA256

    d80ce790aaaf39208b79fbebd709c164f0fe291e5ab84be022c7e6ff07ed539d

  • SHA512

    f7831c54d9aeb6baf0d33cf4151530abf7285f487e46e9417c231bcc5d2a8d0a1928718cd7bb169127b47fb9296b31147ae52cd4d63f158083f9481692d79348

  • SSDEEP

    24576:HyDplP3LSgzbOJOBiPYOrhBz1GGAoLh+87Y6XyncXjq9/0c:SDplP31OKENrhBzgGp15YuZji/0

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1