Extracted

• • Target

    f501a7dbb4d1f56b1bf821b92ffc01199e538cf404b55f2877fd1944b61afd06N

  • Size

    661KB

  • MD5

    3c432c3957a96726c5c6976a1b388680

  • SHA1

    005d90bd708a7e477d3db63979e970cd044f7835

  • SHA256

    f501a7dbb4d1f56b1bf821b92ffc01199e538cf404b55f2877fd1944b61afd06

  • SHA512

    122e1af48f34532963ec3ca1fc1a612593c07cac962eb7adbbb58b2145a18a4ebe86747a94d3ba0d7c88f39daaa8e2367692da1ab794f09ca4624d073cd847ef

  • SSDEEP

    12288:2Mr0y90hyCwTq3ZEEr6fbZdnJSkcoquLFucIl8qbf1Ispn9im:yy+yzTq/o1coquLcuKSs19im

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1