Extracted

• • Target

    343f5d41aee4d2b7259b3b2eff0146657c1bdd729e87b1e8e244ca31b9b67461

  • Size

    556KB

  • MD5

    4cd6ce12c18ec971d1f9d7e6c191e178

  • SHA1

    cfebafa10cc55b933cf7293a604bc906a5bd8437

  • SHA256

    343f5d41aee4d2b7259b3b2eff0146657c1bdd729e87b1e8e244ca31b9b67461

  • SHA512

    9ad49066b1a262b897f1c6de89453294d5b4edf18e39ab4c13bf1bc3f7ac2d85303a48cae034e94df10bad23a3a6b020db8e87f1fc7f1c3d5dc14b4c23dd1100

  • SSDEEP

    12288:ZMrCy90iXztzjgyhowq0XfJo5TtYOas13BMTq7W:3ybJ3gpwrdOaixMT6W

  Score

  10^/10

  redlinedarmdiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1