Extracted

• • Target

    c221ac661006c7d42d8aaff900d4847a1e8ed095b59428b19e419fe47bb9350d

  • Size

    566KB

  • MD5

    6bd7174ab72cc1df8e70bf6f99ed5cf6

  • SHA1

    9c61b089f7160fdde6f664395480e67db8b33d1d

  • SHA256

    c221ac661006c7d42d8aaff900d4847a1e8ed095b59428b19e419fe47bb9350d

  • SHA512

    ff591180f4ebf72b44dc33a895100ba845865cb9a9d98b19cccfa1bf7d1522fb787a76c791f5ab960004d4942d4fad7107c68f5763566202ad1d86e86c7fa4ec

  • SSDEEP

    12288:aMrLy90KE+Ik+gJd5WtwtTJl+JjAvAcHrBZ:5ycATrLBZ

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1