Extracted

• • Target

    fe854ddec5c7621d98c1fc8c0ac33c67fa273783e0a37bcc360f60b6e4e5f31e.exe

  • Size

    477KB

  • MD5

    c5660c1ebb1311c810a7d122cfd73d25

  • SHA1

    fc70616e0d7a1a7e674ab6618c7aa195244ab341

  • SHA256

    fe854ddec5c7621d98c1fc8c0ac33c67fa273783e0a37bcc360f60b6e4e5f31e

  • SHA512

    89053825fb335afdf0cbd0334e84b94e8b1724a6a87dfad30c5842ebb895daa0bb3d2eeeb6303394a7231e24757648f9ae8843b457afe8067668a7f3c75e2efc

  • SSDEEP

    6144:Kuy+bnr+jp0yN90QEOtJMQrXVLrQzb15NeWE3BE2T3HMyVwPkSzcunIQLJE2MAmK:qMrTy908tJbrtrE3E1T3PVwPkLXQXMy

  Score

  10^/10

  redlinefukiadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1