Extracted

• • Target

    4fe0ac49c2ca17dc591f1cd6d910e9672ff974663a817ee1fc403590080ca620

  • Size

    479KB

  • MD5

    86be6eac88a9e1a969d7e02572bbbe6c

  • SHA1

    986fdf2f3c8b5ad793cc47264bdc7b5d05b9b980

  • SHA256

    4fe0ac49c2ca17dc591f1cd6d910e9672ff974663a817ee1fc403590080ca620

  • SHA512

    dcf20454273779c9abd343427e65290b2e32cb9376c503c8a150abb5f7cfd5ac567be365620f850a911e274c8cbfe2ec0b7500b8777ec7187cfc71fcbce006d2

  • SSDEEP

    12288:LMrvy90wXxV7GTQXX9v6nrYUbtHHzF7p:YyZhVwQgHt

  Score

  10^/10

  redlinefukadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1