Extracted

• • Target

    fda4b898a3c579fe7ef0682031a7f1ff9c9cddf6018019f5ef8df2e4533d9083

  • Size

    760KB

  • MD5

    26efdbbd82d0ad67cbe71b3a9435150d

  • SHA1

    c4e050db1dd0cbbdb8c708c75961ccf80cebf626

  • SHA256

    fda4b898a3c579fe7ef0682031a7f1ff9c9cddf6018019f5ef8df2e4533d9083

  • SHA512

    4c7ca07ab63bccb23350332f41153a398b68cc7dd928edaa79d97fbf6fb9d834bbdf1fc124ea05808e8bbf15919a1235437cad8e7a6ee74a15dd4d13389e3f45

  • SSDEEP

    12288:XMr5y90CxiTVr7t4WFgPvM7LrmyynfFOmEAEDRi+IXKONsWl8ldsH/adJafDXwyn:iyhqVnt+P07LC1fsikb/ON/alMKRerWQ

  Score

  10^/10

  redlineromikdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1