Extracted

• • Target

    580817bd3527c5d7de25f9242629f4eeb2b794f7b250439aea3602b0082e1fa5

  • Size

    1.1MB

  • MD5

    5641ef2488487ab04ca69b8d7754c36a

  • SHA1

    fffbaa46e9b5a6aea71d8910c7f42a2f98dfac69

  • SHA256

    580817bd3527c5d7de25f9242629f4eeb2b794f7b250439aea3602b0082e1fa5

  • SHA512

    154c7660d3ace100f32ca3c8be0a1a1e4231ef77af6b820f020951022fb1a1ce83499cf833ebb2c6afdf725dbb64c46076e1d436414a511d1de26e37d1e5f942

  • SSDEEP

    24576:OyhmPmw0JLpog9601ioRpsgGDVw7v1KGCGivSCBdaEGSA:dhQ16Lugf56u79KGCXvLBdaE9

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1