Extracted

• • Target

    7b9e90c3083daa998effe85d04121cd4c695e69474c2b84228735dbb99100a1a

  • Size

    769KB

  • MD5

    fa586e1ced94b14a4e121b01c536bbbf

  • SHA1

    a0cc562ecf6837e780667350b252b84b4e7247e1

  • SHA256

    7b9e90c3083daa998effe85d04121cd4c695e69474c2b84228735dbb99100a1a

  • SHA512

    a011cdf718773d8b77c6fc4d1bdf38d2e00ecebb832fadc8283efd0bc24ec924733070f5e9a3fb88f71bc687a04fdbc42c27c48de31e345d1f4ba933f66a3db9

  • SSDEEP

    12288:IMrHy9015VbHctq0PpY3GU/bKMjOV5qeTn1sdx35seMV8N++lirGWt:fyU5VItZp6/bKpVYoniUeigIrGWt

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1