Extracted

• • Target

    6498b86d46f29c1154ecf109308f221d81b4082e0e959ac46c9b7c79dd2087f0

  • Size

    442KB

  • MD5

    61366dc817316b260370ce5e450210af

  • SHA1

    5fbd714b03440b85d3fb598bcb8fb0f303fa8a32

  • SHA256

    6498b86d46f29c1154ecf109308f221d81b4082e0e959ac46c9b7c79dd2087f0

  • SHA512

    b957ceec86e75ed5b360dec1f9a8d6940637f0cb50600bd016bab06482729c759f81ad9996d858c852c6646e31e0d090c20ac468e6ca226d25ccafa7c6b8afcb

  • SSDEEP

    6144:KHy+bnr+op0yN90QEGyiEeLKBWtC8J+/9mb1YbUGrWBWaPzcmWljhLELvq/c8:lMrYy90Eojz8dabLrW4Mm6SU8

  Score

  10^/10

  redlinerodikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1