Extracted

• • Target

    70207c1fd2be3b308576f1ffe746b469398f0e043a2d1b540100f2e5e97970d5

  • Size

    585KB

  • MD5

    a8d453e760ab21f380e96e86589923ef

  • SHA1

    bfdbbe303b86e97eba49ff04e4d870647f9b504a

  • SHA256

    70207c1fd2be3b308576f1ffe746b469398f0e043a2d1b540100f2e5e97970d5

  • SHA512

    b61061efbd2b315ceb2ef3a7dd4c94ae3bad8a6a8ee768ee7f664ccb3bf55caf3a67f7eaa3a80caf6b0e06f1cd9b7a1a66b22e2794eeb164d2b00d6cf51de3d3

  • SSDEEP

    12288:9Mrmy90+jL9+Vj5fS082Ly4WYv3EQpU1AMMEyaOAbTa3Nf38K:ryP9+VtfSA/Nv3EzNyaOAqN/n

  Score

  10^/10

  redlineronurdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1