Extracted

• • Target

    26d6e5ad51c7f6703838fc810b18e9afb1c9dcacf62c89c7bac3b88b30bc3058

  • Size

    1.1MB

  • MD5

    f1d5a450941d9bf1e4c055b6aab5a1e0

  • SHA1

    2fb1f516ebc4bfc7c3e806de6357a36d305ca56d

  • SHA256

    26d6e5ad51c7f6703838fc810b18e9afb1c9dcacf62c89c7bac3b88b30bc3058

  • SHA512

    600b076096eadb3c182b121f58df3b87e9e6163b2b0b8e53a981fb6623fcd69c9fcb92a901484dd2845b19ad0b4bef94766c6dd66b3a51eb43f731d107f94701

  • SSDEEP

    24576:Yyser7DemRiPiC+zCGN4QqaMvhBP57WatuvBQH+hV:fsebeMJ5CG3QBPtWatuvB8

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1