Extracted

• • Target

    cbb3f407466bfc109f4993f0abde060a0603f62b35e17832ad167807160f2374

  • Size

    1.1MB

  • MD5

    63215cb82a158960be70e97d02f46b89

  • SHA1

    3abb0adc6c6a906b8d6593de414895726aadaaac

  • SHA256

    cbb3f407466bfc109f4993f0abde060a0603f62b35e17832ad167807160f2374

  • SHA512

    ceef62bbd511aed8f133496f9a584ae10b2ecb0ea5ac069b9b9c63fcaad4246e7aa53c5508b240e63714423597fbcff4610704b18531d47d37aeb2f16544ccfa

  • SSDEEP

    24576:8yMFwxBigfBUFFkC/C7G+cS3ii7ex5J23nTAmex4k+qLRpnmcLcS:rMFIBigJUvk8C7GHLAebU3nTAB47qLR1

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1