Extracted

• • Target

    63055f82caaaabf85ada9ff2e096e70d6afe8f6bb7d367fc50a72a8830183448

  • Size

    441KB

  • MD5

    a953896385384704808984a2d556e1d0

  • SHA1

    fbb87e6c70fa5b0ff48aeb447f1fe48bd5935d8e

  • SHA256

    63055f82caaaabf85ada9ff2e096e70d6afe8f6bb7d367fc50a72a8830183448

  • SHA512

    a92ba7c0590ef0bed0d1ab5a6b7dceaabb61ed64387c4ac68174fa115625e9429028ff1c455b79fd5aaa02cc2e982989bb877e0b628c1531d59c54a8a33b94cc

  • SSDEEP

    12288:EMrTy90fBBHfL6GAggHmDz8K14OAD11S8g:HyqBHzFcgzZu+8g

  Score

  10^/10

  redlineramondiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1