Extracted

• • Target

    ad0a87bc58f52a7034d58cdbf018e948d39389545cd103176cd079fa65b45ec6

  • Size

    765KB

  • MD5

    6e866baf65433fe9ccaa8ad78a4f8e16

  • SHA1

    19fbb2ac8bc0a585bf251143aac5f6970bace3e7

  • SHA256

    ad0a87bc58f52a7034d58cdbf018e948d39389545cd103176cd079fa65b45ec6

  • SHA512

    8322bad6738b2c0ab67daace81ce10808fe0fa6a46d012ff218879e1096ef9c894b2fcf4a6ebafa4756f151d7863e315235fd62a26e53d81a391f0836bbdc093

  • SSDEEP

    12288:iMrNy90TgfuKiKMdW6srhPFAOzxlLZtwbGpuD8QJwcyN2Ee2c:HyYgfuKi+hFAOfLZtwbGwDLwcfBt

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1