Extracted

• • Target

    6c4892ecaf3228cf5d44c30d80bb7924c793272b9827c28a9bed12e194434f61

  • Size

    643KB

  • MD5

    fbb197969ab904aeb032c0fe69aaf39b

  • SHA1

    a6818a18c60d034b85906e615cd73ab6a05fa2fa

  • SHA256

    6c4892ecaf3228cf5d44c30d80bb7924c793272b9827c28a9bed12e194434f61

  • SHA512

    27c41dbc30ec7b892674aefb0333b41fc23cdcaa5ca8d46d52c3e65ec5321e3bd1228741fb0a80095b081fea451863b1a536a58263eca3bfcbae42ae3592bd35

  • SSDEEP

    12288:MMrny90LOSd4nSc2eXiqnAsbzTbhxHqOdOgfYG29ptx2DnwUAlkQ+HkQQz:zyYd6LXiqnAsbzTVpd1PnwHqvEQs

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1