Extracted

• • Target

    168acdcf06d3080e527c0e7aad453891491e4b94507e88bea4d417fe7c3db1bc

  • Size

    479KB

  • MD5

    bc740f2fd4cf285e5026fe8cf4ae7898

  • SHA1

    9ac1cd86e975dd329aa055cf39629942ed75d236

  • SHA256

    168acdcf06d3080e527c0e7aad453891491e4b94507e88bea4d417fe7c3db1bc

  • SHA512

    452e838537d55d106beb5d8e9a6151da29bed3cf4d35c5ec287894694b42a2aa05d944507ea53e0699b68ab5017e445cd27458dffbcc340f3efbd6e9f6c17567

  • SSDEEP

    6144:KAy+bnr+6p0yN90QEUNPPUT2568KLkEQNkglva63/QAg0m1TbcS7Ldr4dLoxjn2z:8MrGy90ycT256RhYzPg0mxdr4OjkT

  Score

  10^/10

  redlinedonadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1