Extracted

• • Target

    6e4a310fb0fc448d5053f898e0f75e2fea5304d2ec6d606e6235537e49e3f91d

  • Size

    584KB

  • MD5

    4b3647f84b54142bd5e1fac8191fc158

  • SHA1

    9e16fd5c266f3d35062a2d358efa4908323576b9

  • SHA256

    6e4a310fb0fc448d5053f898e0f75e2fea5304d2ec6d606e6235537e49e3f91d

  • SHA512

    295b38cba2901988d57079649f83138f648f05f1497808156b4e8a9f2e8d0a36f42c2a671ac470597ec5dffc9765e1663dd32854f319a99bfb9baff5319290a0

  • SSDEEP

    12288:KMr4y90Bp5oqXewrirRlT65E+3grBBcOhn2A7FkUV4PeER6Ce:GyTqXd+rXGQh2SFJseER6J

  Score

  10^/10

  redlineronamdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1