Extracted

• • Target

    527c5f621c4680ea8f281f70e421a36a46967ea98a6f9b384fa473463bdfdca4

  • Size

    584KB

  • MD5

    6c9494c6fae3a0eb852fb24d871d0965

  • SHA1

    25577924ba5725d559f4c6009fb6c166c6eeeb5e

  • SHA256

    527c5f621c4680ea8f281f70e421a36a46967ea98a6f9b384fa473463bdfdca4

  • SHA512

    0b85eccd98bb642425a692f2df077dee0d1cd13a99abd121792a25661cfac4cc994281942307b51955c7942fa3e9d30e61ba88cc3bd18a11f96fb2f6e77d6fa5

  • SSDEEP

    12288:VMrHy90BbvIHeyBsMBd3BoZWRzFXCWt54Sv+EsbHR4:my+AeG1d3BnRz1CGmwsF4

  Score

  10^/10

  redlineronamdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1