Extracted

• • Target

    3db129db09679de68914a37eeec7e17d667f78657ea51d76a58325d4e7181c4d

  • Size

    567KB

  • MD5

    db017e3808310c8621e9a960491f0a6a

  • SHA1

    c6c770f51ee29ae77905e84a56ee6f25ab3e5352

  • SHA256

    3db129db09679de68914a37eeec7e17d667f78657ea51d76a58325d4e7181c4d

  • SHA512

    616c829c930d37b1f7f0829dd6624b7f9b6baf4c5c74e1e4b8d3ea5d161b28fbc1b6a1fd53bae3f79f1d83d31ab0f1dd1b7f89b05dcf39f4ff1bcf3a92571fd9

  • SSDEEP

    12288:7MrVy90XNqj7yRblWYYQpWqLik+A0dns2Wl74WWysCK3MpyjF:6y+NYmRhWApV+k+AqsRBv5K3yW

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1