Extracted

• • Target

    bdeaecc7440e6402ea340813ab1c378bae16d324c1dcbcb574ecbe09f72db0cb

  • Size

    424KB

  • MD5

    c5be0903e6761f2a5a9b81f23b9ea7f0

  • SHA1

    025e542cbb9287116c67300f0d6bd363debafe03

  • SHA256

    bdeaecc7440e6402ea340813ab1c378bae16d324c1dcbcb574ecbe09f72db0cb

  • SHA512

    c7f8fae538212855768dea9951a7d82ec0440b24a8515cebfef420d210128bbc04352794c35e33e2266962e9caa8923744a4ba5cac53611f72c5b18ec8e58218

  • SSDEEP

    12288:vMrMy90uBdaNvs59YKqmow0wTBEHmPSWZdDgsuOWB0:7yzBgNUUKqs8GPSidDgsW0

  Score

  10^/10

  redlineronurdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1