Extracted

• • Target

    1cf32f6aa0c950a06fa07b2c5b77b9da5cb5b5f5a79027a82c5258da01c2520a

  • Size

    441KB

  • MD5

    07bf6619d9bd2ec4077878433f4ecd4f

  • SHA1

    1617962ef7b113bb9d4979251a22d89e4904e33d

  • SHA256

    1cf32f6aa0c950a06fa07b2c5b77b9da5cb5b5f5a79027a82c5258da01c2520a

  • SHA512

    259580cb3852b1a1ff693135323b1028d256e54a49a3e42230502162d6bf53593e8c3de7dd55095d828a1d464f6374f5f2da56f43c64b3eec16688bd1595737f

  • SSDEEP

    6144:Khy+bnr+6p0yN90QELg4PJQbWq0EmKqAHzME/lvB9qo0tE03exCvpidWbilmT:DMrOy90tFq3CSQCZ+N3exoigbB

  Score

  10^/10

  redlinerodikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1