Extracted

• • Target

    6ce79a5adc7a3134f87261297697557d1f92b5469410dd99e07d5b23fa32252c

  • Size

    564KB

  • MD5

    0a661500c947a45ee021e00b932fb98b

  • SHA1

    a5f35ccc237b0ac34568d0fd409b83abd32e5b2e

  • SHA256

    6ce79a5adc7a3134f87261297697557d1f92b5469410dd99e07d5b23fa32252c

  • SHA512

    ccf07558672ef6a4e572f3e675001dd1ed0e18f3a246fa156788d5312c9fd455eeb633bbee81eadb2e828c094f4e5d0613a8a3bf8d162d11fdbbd6b93a1755bc

  • SSDEEP

    12288:iMr0y90SDqYE/0JXOCoJOa4fEZBLvUDRgy45Z8B7OsSlJNbEM:ayoYQ0JXOCna+WgWO7OsSnNb1

  Score

  10^/10

  redlineronurdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1