Extracted

• • Target

    717cfb41978f551038326e835c16fa8b5f3283a2a2904e2d4a84e8c19ad5b14a.exe

  • Size

    510KB

  • MD5

    28c5064542849e7a1dcd54e31a9eda5f

  • SHA1

    296e93fad7c29dfa957b7d4005b79e95b9941364

  • SHA256

    717cfb41978f551038326e835c16fa8b5f3283a2a2904e2d4a84e8c19ad5b14a

  • SHA512

    686505b1a27cb2d6d62c2b3f78bdd6588daa70e8215a78363dbd0dd2112eb5a52352d2a0259c3d493dbac38a3082feb3a2f622673f1adc707d333d08fb61c519

  • SSDEEP

    12288:oMray90ax2MZODIBX2m1xgqM1Ck32dQ31E/MB:yyz2ME4yB732O31wMB

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1