Extracted

• • Target

    8d8319e30247dd21d3a97207e2b9193f9329f97aa147dee9e2f4dfa9e304d2ab

  • Size

    780KB

  • MD5

    56e5fd7e255dc7bb88bff655503e6341

  • SHA1

    dd85cc70c874e3bd5b54fdeb691094a48d5f3728

  • SHA256

    8d8319e30247dd21d3a97207e2b9193f9329f97aa147dee9e2f4dfa9e304d2ab

  • SHA512

    576a551aab259774f704995b80d49b3106519c6ee67ad095022642a7adc114df4b68bc979213fb6cc4044f443d8c25fd9f8ebc0124c94cb8d8dfc0975c468f32

  • SSDEEP

    12288:qMrJy90mDwBbpRAdu2vv3ZCRd5pwqyz+8XtUmxneZ:LyHDId2tjBC89USneZ

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1