Extracted

• • Target

    1039984b8472e59b1ddd4f4a6c5dbfb50b783d2f2eb724a92eba33dd3e70c42a

  • Size

    479KB

  • MD5

    d2f1ec7e5a9b53154075870c2d3b2ba7

  • SHA1

    b9978d56dd66af4885801a75b920eee3e85f37ff

  • SHA256

    1039984b8472e59b1ddd4f4a6c5dbfb50b783d2f2eb724a92eba33dd3e70c42a

  • SHA512

    5218371122c6f836639bd097686fd9422f7b89fbed718f8cafd70c3f72a08b0f9f5ca0b5f49cf2d5e68aaec4bdfa76335161b396b14f8821a288139b42fa8bd5

  • SSDEEP

    12288:gMrCy90apxBh2DSRV1roGth1RnwCyKr3PDjRt14Z:SyFdgOPFoshnzDv14Z

  Score

  10^/10

  redlinediwerdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1