Extracted

• • Target

    f9ec8f873f35ec3ec7fde07f82f184e355b8c813c985de79d3a562ab75af59bb

  • Size

    1.5MB

  • MD5

    28acf0f823fa99382e3e4f568c808571

  • SHA1

    3fe767869a414b60e81ddf3ea9d4c3fc9a1ec588

  • SHA256

    f9ec8f873f35ec3ec7fde07f82f184e355b8c813c985de79d3a562ab75af59bb

  • SHA512

    dd514845030289b42e27a4709c83450438cdf6e722a636285c5fceff8dac4bd17aed175cde8aa835be426e96125b75ef44080898fd367eb722ca66c9db650db6

  • SSDEEP

    24576:tylwVBGORj9ZRTYeyp986KhVyp5jB1bjIwbuQxFqsrkL2AsCQ:IOzGORJZ5Yey8hVypRB1bNFpAL7sC

  Score

  10^/10

  redlinemostdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1