Extracted

• • Target

    b72977062937bf4da882757403cf0415286612b8c9b6d67f71fa034ead2edfa9

  • Size

    550KB

  • MD5

    b3e44010409787f71ae985dcc196c6bb

  • SHA1

    d1bfe9f8ea5ec3866de50a78e31d0aba4491e180

  • SHA256

    b72977062937bf4da882757403cf0415286612b8c9b6d67f71fa034ead2edfa9

  • SHA512

    1cdcafde1492c7670fb4455871ac8fe578f687f63eea9cffb42b8d0afc5304203beeaa9d5f059a6029f5a85e6042626d7eb62a301cde9cf03f78e83f000aa0c2

  • SSDEEP

    12288:GMr+y90uLkAt0rV8a50BzBNGTGqxCqoXW2891ZNl3Qd4A4pcsol2nBCv:syfkpVP50gThxTUU53Qd4Dpcso0u

  Score

  10^/10

  redlinefusadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1