Extracted

• • Target

    89fc94d5f1a47f62f2595dfe407cc567d253615907497d72239c8990750aac70

  • Size

    1.1MB

  • MD5

    44b97ac18a5273f351794ecf7cb3091c

  • SHA1

    b38efaf8cf417137fac57c4eaf1a394515c1b964

  • SHA256

    89fc94d5f1a47f62f2595dfe407cc567d253615907497d72239c8990750aac70

  • SHA512

    4dec54af4ef3d0d310e2456cd31d0b9aac7b5a7396e3405f51b4cbf44eb85435e46870fd42ae0dbe2697e31cae59452cafacbc051b509608861761aa16fea515

  • SSDEEP

    12288:bMr+y90kXW3gOeiLwtEJ3a0kkOdq0xdhH9V0nayVCoE6kJVE5FBAvriwtuoBd4hO:ZyDCwyq0ktdhdECArPavOwo2M4

  Score

  10^/10

  redlinedomadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1