Extracted

• • Target

    59608b11754753e003ed1a415f9ade6cce9f02dc0f2ec6c669a20452d611f075

  • Size

    440KB

  • MD5

    cd62f0249856bfeacd9560c17846cf75

  • SHA1

    4767b0f08c805ff5f3effc609e831ad85292947e

  • SHA256

    59608b11754753e003ed1a415f9ade6cce9f02dc0f2ec6c669a20452d611f075

  • SHA512

    2eee091b42153ee627e0d2e4ee84ffe2884431410494c335aae87a04e7ee888eb2be0bfe7007ddf844662e36ce2a6a3530034f2c6b763b95be58700e94fdbbb7

  • SSDEEP

    6144:KKy+bnr+ip0yN90QEAU4NCXbAkz/0su1digqs4ujd8ifiFVDsT2couGzJWXo2a8j:CMruy90yJNCUA/bU7wJiKNcIWvvj

  Score

  10^/10

  redlinerodikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1