Extracted

• • Target

    92dfd409b0a61277c1c6498f23d1c615e3b6fbcf65dce1ad748efc75ff3a9625

  • Size

    316KB

  • MD5

    9014f97c862717af957b17d34cb3101c

  • SHA1

    2be49d18fcd99340c86c2072f81bb5a990803c27

  • SHA256

    92dfd409b0a61277c1c6498f23d1c615e3b6fbcf65dce1ad748efc75ff3a9625

  • SHA512

    1fdd6ffc141060969e040383544f5dfcc6228e36b9971c180c9dcc1c276f47a850d4eb81346438e1148920f1529588e80b18256262dd7a2edd17bec71e6bdd8c

  • SSDEEP

    6144:K+y+bnr+ip0yN90QER96G62nM4e1PyCeQw5INFzsNhMvn:2Mr+y901g2MhW5CZMMv

  Score

  10^/10

  redlinedebrodiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1