Extracted

• • Target

    b3e3ae4533bb2f6a2a1892cbeec7dfeae217ae06833f331bd161fe703046cf7e

  • Size

    665KB

  • MD5

    dff94bfba00bfbc1e25db393e65e3fe8

  • SHA1

    3af31d912121cb74bf71e0cd958c205963c8af55

  • SHA256

    b3e3ae4533bb2f6a2a1892cbeec7dfeae217ae06833f331bd161fe703046cf7e

  • SHA512

    00f6bca6213bf7d1107926985272affaa5acf6d6be175aae6887a4434498d8f5ccd2143ab49a87320a961356988a61b84cb5036dc9552ff7e655dbe3c02493a9

  • SSDEEP

    12288:IMr6y90/4Di6xLb/j4G5qwZnSVdxLMserQ8Tb+PgnpMs:SyK+YGYAn0XeUr4nis

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1