Extracted

• • Target

    4c3f2b95d928efa12ad341d4c3daf6bb18c4c20f7aa00352d623c9bafab66644

  • Size

    584KB

  • MD5

    d7d8756b7bd08097914841f44eea9a9f

  • SHA1

    69dd78d513ad3e5dc38ae25c73709f790dc3a260

  • SHA256

    4c3f2b95d928efa12ad341d4c3daf6bb18c4c20f7aa00352d623c9bafab66644

  • SHA512

    a0b7d5586988833b9e120e589c0b96e4e28d6010897d3bab91046334f8c37fb5baf0d9dcae8c0549c7c31e504c6f81076d9594057782081b87b96751551dee6d

  • SSDEEP

    12288:8MrZy90rspV35Ub4sjcA9RTza2bxwpYTgcTEkYISbZDQv:dyVVKHfa2qcTA3VDQv

  Score

  10^/10

  redlineronurdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1