Extracted

• • Target

    8ea30b100c07d472eb3589a40bcef9eb84a4be98b7774c087cfcb94e1122147e

  • Size

    537KB

  • MD5

    0803ce5fd5808634c5259671565fa46d

  • SHA1

    078ada03865ee4f58e3e1ff6c9a5cbc664660ae8

  • SHA256

    8ea30b100c07d472eb3589a40bcef9eb84a4be98b7774c087cfcb94e1122147e

  • SHA512

    d868d87655bff0efea704227c0ef45f66a22b60f3cf379f94c192583fba9a8e0e9265a369fd4e5369078255278ee6840cd7735814fe9bce6b6ba759729d13113

  • SSDEEP

    12288:3Mrly903DxW5rgGYxqzzYnCDFwlYJRitvWeaT5V04:2ytcnqnilIi2v

  Score

  10^/10

  redlinefukadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1