Extracted

• • Target

    1e916e7672c440ebe5fc76c66a8119d890ef3ddcb96ae59945ee17a346031555

  • Size

    567KB

  • MD5

    5f5b3994a290e909ab81b46e64906a01

  • SHA1

    6627f229b092eab079a6b88e3d7a794a12afcc0e

  • SHA256

    1e916e7672c440ebe5fc76c66a8119d890ef3ddcb96ae59945ee17a346031555

  • SHA512

    e815d95179ac465006f9e5d51705002761547637429344849f993e185e1295647e49f8f732499f593f31bc85de8ececb9917667b5fb03e3de79c9a637db68fbb

  • SSDEEP

    12288:1Mrsy90DZfdiJV0Wh/1jjdP1WX1AYR5g534dhoJiuTq:ZyaftOFR1WX+35Oo4Yq

  Score

  10^/10

  redlinedarisdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1