Extracted

• • Target

    6f0579b099fa4d1f696fdfdaad1991112851c6e8504e0084e2805a6cdb72c0db

  • Size

    643KB

  • MD5

    737aaa883a2639b1e051ae9284283563

  • SHA1

    286c1e935274fff67180d669f05765c2c9c253f4

  • SHA256

    6f0579b099fa4d1f696fdfdaad1991112851c6e8504e0084e2805a6cdb72c0db

  • SHA512

    4668052ac602c2d69feea0b981dfd33aca81d0a1abeebc9a2095c71eb254cac3354fd2afe3bdf7a8f52b865b059ac6b35def222a2fd662e7dab0f0947e0d7136

  • SSDEEP

    12288:MMrly90HclxwXLU3gE66CMJ9x8A34N5RaPL0u4EXbmHziHy6qcEeT:Jy6xY3gE65MJ9+NTaz0uDmHu6cd

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1