Extracted

• • Target

    7d863f745aff8be47f59a02b0ee35cb04df9f0712c5166ec4a63bc536d22838eN.exe

  • Size

    431KB

  • MD5

    4c8e4b5bcd17a67b5ecc83990f26df06

  • SHA1

    3598069bbb31d06951a4bdac6f254a6d895b5ace

  • SHA256

    a0d930d236945df6c9f9a824ca649d4d8b615589a93d7ca54d3deec9e749876b

  • SHA512

    7075188d4d2119d5fb3efa5f530454030ed207f2bf498af6d7e68c1d28da3efded059f3f5fadce29fd647d932d504885f9fb9aed8f3c0c4225641d8bb0e0d771

  • SSDEEP

    6144:K3y+bnr+op0yN90QE2ooBH8o9+vzM8Fc5Nx61gyyQ2RolKBKODeL4eek:ZMrYy90Dvn1gyyQWqUKkeek

  Score

  10^/10

  redlineramondiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1