Extracted

• • Target

    26149037deefec53ab26055d5f98b7d8c278665d67182f71f4c759aa0bb23fd1

  • Size

    479KB

  • MD5

    b1f25bf1737db816f55e6efddaef03cb

  • SHA1

    88b2c5e753926e156bea7c3b3a776847771222db

  • SHA256

    26149037deefec53ab26055d5f98b7d8c278665d67182f71f4c759aa0bb23fd1

  • SHA512

    b60a88ab1b827f805da3a8d887faf456a4c4d34d8476432ba5a69bde3558a9f7035fdaf33ab019935c875ab864759e45e83158b47754d43b728c02d42c988fef

  • SSDEEP

    6144:Key+bnr+ip0yN90QEbnN96Q9iWbwdTmt/z1OKItlbL++iWK0xeTLZAsbb8gver9I:iMrGy90tnNwAbxhgHtlVZ+bOZVv4N

  Score

  10^/10

  redlinedivandiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1