Extracted

• • Target

    8345a64a94af156ccf58ccb0d5790d80774a1af2849fca9f09a0b0f0c565a2a8

  • Size

    371KB

  • MD5

    d146b5cb43def03470b0a21fbcd0ab4a

  • SHA1

    7d94da1aef70d201b64f8ec619694af233e0fd2c

  • SHA256

    8345a64a94af156ccf58ccb0d5790d80774a1af2849fca9f09a0b0f0c565a2a8

  • SHA512

    ffe87ae638a566978e40033a1ebb10b845b347293561a37f6cb21793669ebce4def248881f8abbd2d3ce6653365c53c8148913e0a99aa3910f01cf5b7050fbe1

  • SSDEEP

    6144:nHp0yN90QESmKItMqxYrVzSoEOP1hgCUZ03Igm3oGMFxBteWOeh4l:iy90kSSEORP1CZ03InWhOeh+

  Score

  10^/10

  redlinemostdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1